diff options
| author | Sudheer Shanka <sudheersai@google.com> | 2016-06-08 17:13:24 -0700 |
|---|---|---|
| committer | The Android Automerger <android-build@android.com> | 2016-06-24 16:52:58 -0700 |
| commit | 01875b0274e74f97edf6b0d5c92de822e0555d03 (patch) | |
| tree | 8b35ed51a0e2c35299818c5bb99db43ce4b679f6 /core/res | |
| parent | 468651c86a8adb7aa56c708d2348e99022088af3 (diff) | |
| download | frameworks_base-01875b0274e74f97edf6b0d5c92de822e0555d03.zip frameworks_base-01875b0274e74f97edf6b0d5c92de822e0555d03.tar.gz frameworks_base-01875b0274e74f97edf6b0d5c92de822e0555d03.tar.bz2 | |
Reduce shell power over user management.
Remove MANAGE_USERS permission from shell and whitelist it for
some specific functionality.
Bug: 29189712
Change-Id: Ifb37448c091af91991964511e3efb1bb4dea1ff3
Diffstat (limited to 'core/res')
| -rw-r--r-- | core/res/AndroidManifest.xml | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/core/res/AndroidManifest.xml b/core/res/AndroidManifest.xml index 08bccc1..4b54459 100644 --- a/core/res/AndroidManifest.xml +++ b/core/res/AndroidManifest.xml @@ -1392,6 +1392,14 @@ <permission android:name="android.permission.MANAGE_USERS" android:protectionLevel="signature|privileged" /> + <!-- @hide Allows an application to create, remove users and get the list of + users on the device. Applications holding this permission can only create restricted, + guest, and managed users. For creating other kind of users, + {@link android.Manifest.permission#MANAGE_USERS} is needed. + This permission is not available to third party applications. --> + <permission android:name="android.permission.CREATE_USERS" + android:protectionLevel="signature" /> + <!-- @hide Allows an application to set the profile owners and the device owner. This permission is not available to third party applications.--> <permission android:name="android.permission.MANAGE_PROFILE_AND_DEVICE_OWNERS" |