Refactor and cleanup of existing patches to move changes to downstream added files for future changes; Guard AppsFilter classes via sealed modifiers#82

Open

quh4gko8 wants to merge 305 commits intoGrapheneOS:15from repository-staging:15-pr_12-13_01

+25,681-1,017

This pull request is big! We're only showing the most recent 250 commits

Commits on Dec 6, 2024

SettingsProvider: disable bluetooth by default

thestinger
authored and
muhomorr
committed
SettingsProvider: enable backup support via seedvault

thestinger
authored and
muhomorr
committed
SettingsProvider: set TEXT_SHOW_PASSWORD to false by default

thestinger
authored and
muhomorr
committed
SettingsProvider: Enable screen auto brightness by default

girlbossceo
authored and
muhomorr
committed
SettingsProvider: hide sensitive information while locked by default

thestinger
authored and
muhomorr
committed
SettingsProvider: Migration for legacy fingerprint keyguard toggle

flawedworld
authored and
muhomorr
committed
SettingsProvider: add a helper class for migrating Global,Secure values
muhomorr
committed
SettingsProviderHooks: Infrastructure for hooking settings state init

quh4gko8
authored and
muhomorr
committed
Disable "Add users when locked" settings on every boot

quh4gko8
authored and
muhomorr
committed
Disable instant apps feature on every boot

quh4gko8
authored and
muhomorr
committed
CarrierConfig: Always show APN settings on CDMA carriers

flawedworld
authored and
muhomorr
committed
CarrierConfig: Do not mark dun APN types as read only

flawedworld
authored and
muhomorr
committed
CarrierConfig: Always show ICCID

flawedworld
authored and
muhomorr
committed
CarrierConfig: allow toggling VoWiFi while roaming by default

girlbossceo
authored and
muhomorr
committed
enable secondary user logout support by default

flawedworld
authored and
muhomorr
committed
enable backup service for non-owner users

empratyush
authored and
muhomorr
committed
increase default max password length to 64

thestinger
authored and
muhomorr
committed
increase default max password length to 128

neelchauhan
authored and
muhomorr
committed
GrapheneOS boot logo mask

thestinger
authored and
muhomorr
committed
use black wallpaper by default

thestinger
authored and
muhomorr
committed
stop auto-granting location to system browsers

thestinger
authored and
muhomorr
committed
appop: Save discrete app op history for more permissions

kdrag0n
authored and
muhomorr
committed
add check for empty TTS engine name

thestinger
authored and
muhomorr
committed
Add a config to state whether a device supports increased touch sensitivity. (GrapheneOS#2 )

lzlrd
authored and
muhomorr
committed
stop enforcing camera sound for certain carriers

thestinger
authored and
muhomorr
committed
colors: Switch to GrapheneOS blue color palette for Material You

kdrag0n
authored and
muhomorr
committed
improve PendingIntent security check compatibility

thestinger
authored and
muhomorr
committed
Show USB icon in notification instead of generic system icon

kdrag0n
authored and
muhomorr
committed
Sharesheet: Display two rows of max ranked targets

luk1337
authored and
muhomorr
committed
extsettings: add a set of helper classes for defining system settings
muhomorr
committed
add exec-based spawning support

thestinger
authored and
muhomorr
committed
disable exec spawning when using debugging options

thestinger
authored and
muhomorr
committed
add parameter for avoiding full preload with exec

thestinger
authored and
muhomorr
committed
pass through fullPreload to libcore

thestinger
authored and
muhomorr
committed
disable OpenGL preloading for exec spawning

thestinger
authored and
muhomorr
committed
Revert "disable OpenGL preloading for exec spawning"

thestinger
authored and
muhomorr
committed
disable resource preloading for exec spawning

thestinger
authored and
muhomorr
committed
disable class preloading for exec spawning

thestinger
authored and
muhomorr
committed
disable WebView reservation for exec spawning

thestinger
authored and
muhomorr
committed
disable JCA provider warm up for exec spawning

thestinger
authored and
muhomorr
committed
disable preloading classloaders for exec spawning

thestinger
authored and
muhomorr
committed
disable preloading HALs for exec spawning

thestinger
authored and
muhomorr
committed
pass through runtime flags for exec spawning and implement them in the child

randomhydrosol
authored and
muhomorr
committed
exec spawning: don't close the binder connection when the app crashes
muhomorr
committed
add a wrapper for execveat(2)
muhomorr
committed
zygote: define runtime flags that depend on exec spawning
muhomorr
committed
exec spawning: support runtime resource overlays
muhomorr
committed
exec spawning: support disabling hardened_malloc and extended VA space
muhomorr
committed
exec spawning: add workaround for late init of ART userfaultfd GC
muhomorr
committed
use HTTPS X-Time header for time updates instead of NTP

committed
extend auto-time setting to forced time updates
muhomorr
committed
reduce system clock drift warning

thestinger
authored and
muhomorr
committed
core/config: disable using telephony-based auto time

thestinger
authored and
muhomorr
committed
add system package check methods to PackageUtils
muhomorr
committed
filter out non-system packages from location indicator exemptions
muhomorr
committed
filter out non-system packages from getLocationBypassPackages() result
muhomorr
committed
define package name of first-party app source
muhomorr
committed
SystemUI: require unlocking to use QS tiles by default
muhomorr
committed
SystemUI: allow to use some QS tiles while device is locked
muhomorr
committed
SystemUI: enable NFC quick settings tile

thestinger
authored and
muhomorr
committed
SystemUI: Enable production-ready feature flags

kdrag0n
authored and
muhomorr
committed
SystemUI: Use new privacy indicators for location

kdrag0n
authored and
muhomorr
committed
SystemUI: fully enable location indicators by default

thestinger
authored and
muhomorr
committed
SystemUI: specify config_sceenshotWorkProfileFilesApp
muhomorr
committed
SystemUI: add Battery share & Battery share quick tiles

empratyush
authored and
muhomorr
committed
SystemUI: change default quick tiles and quick tile order

thestinger
authored and
muhomorr
committed
SystemUI: make screenshot sound use touch sounds setting

girlbossceo
authored and
muhomorr
committed
SystemUI: apply "Add users from lock screen" setting to guest users
muhomorr
committed
SystemUI: Allow customizing lock screen shortcuts via ThemePicker

quh4gko8
authored and
muhomorr
committed
Add config to exempt telephony-related app from location indicators

kdrag0n
authored and
muhomorr
committed
exempt some system packages from status bar privacy indicator

thestinger
authored and
muhomorr
committed
allow PackageInstaller to use platform APIs
muhomorr
committed
PackageInstaller: link "App info" screen from the uninstallation dialog
muhomorr
committed
PackageInstaller: fix NPE due to a race condition in PackageUtil
muhomorr
committed
PackageInstaller: fix crash when showing app's first confirmation prompt
muhomorr
committed
disable support for pre-approving PackageInstaller sessions
muhomorr
committed
define READ_LOGS_FULL permission for promptless logcat access
muhomorr
committed
add APIs for launching LogViewer app
muhomorr
committed
add helpers for system_server extensions
muhomorr
committed
Warn the user if they are using a prototype Pixel device

flawedworld
and
muhomorr
committed
Support forwarding notifications from other users

authored and
muhomorr
committed
DeviceIdleJobsController: don't ignore whitelisted system apps
muhomorr
committed
do not allow disabling app visibility filtering
muhomorr
committed
add hooks for modifying PackageManagerService behavior
muhomorr
committed
rename AppsFilterImpl.grantImplicitAccess method
muhomorr
committed
add hooks for modifying ActivityThread behavior
muhomorr
committed
AppBindArgs: infrastructure for passing extra args to app process init
muhomorr
committed
infrastructure for custom handling of known packages
muhomorr
committed
gosps: support for per-app GrapheneOS-specific persistent state
muhomorr
committed
extend excludedMethods list in AndroidPackageTest
muhomorr
committed
add method for updating cached package permission state
muhomorr
committed
PackageHooks: infrastructure for per-package hooks in system_server
muhomorr
committed
add base class for complex per-app switches
muhomorr
committed
SettingsLib: add CategoryKey for Exploit protection screen
muhomorr
committed
infrastructure for spoofing self permission checks
muhomorr
committed
infrastructure for special runtime permissions
muhomorr
committed
add special runtime permission for other sensors
muhomorr
committed
notify the user when sensors access is denied by OTHER_SENSORS perm
muhomorr
committed
make INTERNET into a special runtime permission

thestinger
authored and
muhomorr
committed
improve compatibility of INTERNET special runtime permission
muhomorr
committed
don't run jobs that need connectivity in apps that lack INTERNET perm
muhomorr
committed
PackageInstallerUI: an option to skip auto-grant of INTERNET permission
muhomorr
committed
use permanent fingerprint lockout immediately

thestinger
authored and
muhomorr
committed
add system property for disabling keyguard camera

thestinger
authored and
muhomorr
committed
add auto-reboot feature
muhomorr
committed
infrastructure for the Storage Scopes feature
muhomorr
committed
sscopes: temp: disable incomplete handling of READ_MEDIA_VISUAL_USER_SELECTED
muhomorr
committed
control access to Android/obb directory with a GosPackageState flag
muhomorr
committed
ErrorDialogController: do not auto-dismiss crash dialogs
muhomorr
committed
fix ANR details link not working in profiles and in secondary users
muhomorr
committed
include path of ANR stack traces file in ApplicationErrorReport
muhomorr
committed
don't block reading ANR stack traces file via Unix file permissions
muhomorr
committed
add option to view application error details in LogViewer app
muhomorr
committed
Set always-on and lockdown on by default on first vpn connection at system_server side

quh4gko8
authored and
muhomorr
committed
pre-grant POST_NOTIFICATIONS to more system apps
muhomorr
committed
allow privileged installer to search for packages across all users
muhomorr
committed
extend original-package renaming to provider authorities for Vanadium
muhomorr
committed
extend original-package renaming to static launcher shortcuts
muhomorr
committed
bugfix: properly acquire package state from original package

quh4gko8
authored and
muhomorr
committed
disable package parser cache
muhomorr
committed
perform additional boot-time checks on system package updates
muhomorr
committed
allow out-of-band package updates to use original-package system
muhomorr
committed
require fs-verity when installing system package updates
muhomorr
committed
don't allow updating system packages to the same versionCode
muhomorr
committed
allow privileged installers to use getSharedLibraries(MATCH_ANY_USER)
muhomorr
committed
allow only first party app source and shell to update system packages
muhomorr
committed
Remove build fingerprint from screenshot EXIF

girlbossceo
authored and
muhomorr
committed
add toggle for screenshot timestamp EXIF metadata

girlbossceo
authored and
muhomorr
committed
SUPL: Don't send IMSI / Phone number to SUPL server

MSe1969
authored and
muhomorr
committed
add GNSS SUPL setting
muhomorr
committed
allow privileged installers to maintain a global list of busy packages
muhomorr
committed
add option to scramble PIN layout
muhomorr
committed
enable LOCK_PIN_ENHANCED_PRIVACY setting by default
muhomorr
committed
don't crash apps that depend on missing Gservices provider
muhomorr
committed
integrate Google's EuiccSupportPixel package
muhomorr
committed
integrate Google's eUICC LPA package (EuiccGoogle)
muhomorr
committed
do not auto-grant Camera permission to the eUICC LPA UI app
muhomorr
committed
add a method for sending BOOT_COMPLETED broadcast to a specific package
muhomorr
committed
define READ_DEVICE_SERIAL_NUMBER permission for Build.getSerial() access
muhomorr
committed
aauto: define a restricted version of the MANAGE_USB permission
muhomorr
committed
aauto: add definition of restricted BLUETOOTH_PRIVILEGED permission
muhomorr
committed
aauto: add definition of restricted WIFI_PRIVILEGED permission
muhomorr
committed
aauto: add definition of restricted READ_PRIVILEGED_PHONE_STATE permission
muhomorr
committed
adjust definition of TelecomManager.getUserSelectedOutgoingPhoneAccount()
muhomorr
committed
aauto: support using aauto USB accessory activity as a default activity
muhomorr
committed
aauto: define ASSOCIATE_COMPANION_DEVICES_RESTRICTED permission
muhomorr
committed
aauto: support allowing association with "automotive projection" devices
muhomorr
committed
gmscompat: add compatibility layer for unprivileged GMS

thestinger
authored and
muhomorr
committed
require vendor camera extensions package to be a system app by default
muhomorr
committed
add config for Pixel Camera Services
muhomorr
committed
infrastructure for creating per-package seinfo overrides
muhomorr
committed
support denying special access to hardware accelerators by Google apps
muhomorr
committed
add GNSS PSDS setting
muhomorr
committed
support redirecting ContentProvider calls to another provider
muhomorr
committed
infrastructure for the Contact Scopes feature
muhomorr
committed
add connectivity checks setting and its migration from Settings.Global
muhomorr
committed
Wi-Fi auto turn off

muhomorr
and
empratyush
committed
Bluetooth auto turn off

muhomorr
and
empratyush
committed
implement dynamic deny_new_usb toggle mode

thestinger
authored and
muhomorr
committed
add support for hooking LocationManager methods
muhomorr
committed
improve compat with apps that try to access network location provider
muhomorr
committed
add RemoteKeyProvisioning server override setting
muhomorr
committed
support showing dexopt progress during boot
muhomorr
committed
fix crash of boot-time info dialog due to delayed font init
muhomorr
committed
don't skip AOT compilation of apps that weren't recently used
muhomorr
committed
do not delete compiled code (OAT files) of hibernated apps
muhomorr
committed
disable OtaDexoptService
muhomorr
committed
add notification-based UI for the background dexopt job
muhomorr
committed
infrastructure for per-package dex2oat compiler filter overrides
muhomorr
committed
always use speed dex2oat compiler filter for VPN service packages
muhomorr
committed
add helper class for launching non-standard Settings intents
muhomorr
committed
add helper class for notifications that link AppSwitch UI
muhomorr
committed
infrastructure for passing extra args to Zygote and WebViewZygote
muhomorr
committed
infrastructure for passing SELinux flags to the kernel
muhomorr
committed
add per-app setting for hardened_malloc and extended VA space
muhomorr
committed
always stop app zygotes when app is being force-stopped
muhomorr
committed
add per-app native debugging setting
muhomorr
committed
add system API for getting app info by PID
muhomorr
committed
infrastructure for handling callbacks from logd to system_server
muhomorr
committed
infrastructure for showing notifications about SELinux TSEC_FLAG denials
muhomorr
committed
show notification after app is blocked from accessing ptrace
muhomorr
committed
fix rate limiting for non-app tombstones
muhomorr
committed
DropBoxManager: fix TreeSet API contract violations
muhomorr
committed
fix an upstream race condition in handling of system error files
muhomorr
committed
DropBox: skip spurious system_server_crash entries
muhomorr
committed
DropBox: skip fsck.f2fs results that don't contain errors
muhomorr
committed
notify the user about notable system journal entries
muhomorr
committed
add per-app dynamic code execution settings
muhomorr
committed
improve memory DCL restriction setting
muhomorr
committed
improve storage DCL restriction setting
muhomorr
committed
add per-app memory tagging setting
muhomorr
committed
add a test for the new per-app hardening features
muhomorr
committed
Widevine provisioning setting

maade93791
authored and
muhomorr
committed
hide from Aurora Store packages that it's not allowed to update
muhomorr
committed
run full explicit GC in SystemUI and system_server after locking

thestinger
authored and
muhomorr
committed
add UsbManager API for configuring USB port security state
muhomorr
committed
add setting for USB port security state
muhomorr
committed
Do not use filter calling uid parameter originally intended for instant apps

quh4gko8
authored and
muhomorr
committed
Disallow the camera shortcut toggle from the lockscreen

neelchauhan
authored and
muhomorr
committed
disable support for adoptable storage
muhomorr
committed
add a helper class for wiping eUICCs
muhomorr
committed
extend the upstream wipe-without-reboot implementation
muhomorr
committed
add duress password feature
muhomorr
committed
add lock_settings shell commands for testing the duress password feature
muhomorr
committed
add lock_settings shell command option for printing executed Weaver ops
muhomorr
committed
add a test for the duress password feature
muhomorr
committed
fix ApplicationInfo flag initialization being skipped in some cases
muhomorr
committed
stub out reads of hidden system settings in Google's text-to-speech app
muhomorr
committed
make Google's text-to-speech app force-queryable
muhomorr
committed
show a deprecation warning dialog on each launch of a 32-bit app
muhomorr
committed
better 32-bit deprecation warning

thestinger
authored and
muhomorr
committed
fix touch-to-unlock on Google devices with side fingerprint scanner
muhomorr
committed
add setting for alternative touchscreen mode
muhomorr
committed
don't report some android.hardware.bluetooth-service.bcmbtlinux crashes
muhomorr
committed
don't report harmless fingerprint-service.goodix crash
muhomorr
committed
sysconfig: support enabling association restrictions without exemptions
muhomorr
committed
add config for Pixel Health app
muhomorr
committed
new PermissionService: implement shouldBlockGrantRuntimePermission()
muhomorr
committed
new PermissionService: implement updatePermissions()
muhomorr
committed
new PermissionService: implement PackageHooks support
muhomorr
committed
new PermissionService: support for special runtime permissions
muhomorr
committed
temp: unconditionally enable system crash notifications
muhomorr
committed
Revert "temp: unconditionally enable system crash notifications"

thestinger
authored and
muhomorr
committed
add handling for early boot-time system journal notifications
muhomorr
committed
add helper class for notifying the user about system_server errors
muhomorr
committed
include path of text tombstone file in LogViewer intents
muhomorr
committed
ignore factory reset protection (FRP)
muhomorr
committed
fix KGUM.onPostureChanged() NPE SystemUI crash on foldable devices
muhomorr
committed
fix check for the current holder of the Wallet app role
muhomorr
committed
disable memory tagging for Pixel Camera Services
muhomorr
committed
don't remove app widgets from user's home screen when the user stops

muhomorr
and
maade93791
committed
raise backup transport timeout

thestinger
authored and
muhomorr
committed
partially reset granted special runtime perm state to pre-A15 state
muhomorr
committed
don't spam to the system log buffer from loadAconfigDefaultValues()
muhomorr
committed
add workaround for showShutdownDialog() system_server crash
muhomorr
committed
add utility class for obtaining and keeping track of Binder caller info
muhomorr
committed
fix handling of MATCH_ARCHIVED_PACKAGES flag in getPackageUidInternal()
muhomorr
committed
update lint baseline
muhomorr
committed
Reapply "temp: unconditionally enable system crash notifications"
muhomorr
committed
Revert "partially reset granted special runtime perm state to pre-A15 state"
muhomorr
committed

Commits on Dec 9, 2024

Commits on Dec 11, 2024

Revert "core/config: disable safe volume everywhere, not just the US"

muhomorr
authored and
thestinger
committed
disable safe media volume management

muhomorr
authored and
thestinger
committed