summaryrefslogtreecommitdiffstats
path: root/packages/FusedLocation
diff options
context:
space:
mode:
authorChristopher Tate <ctate@google.com>2013-05-08 15:25:41 -0700
committerChristopher Tate <ctate@google.com>2013-06-17 12:47:35 -0700
commitccbf84f44c9e6a5ed3c08673614826bb237afc54 (patch)
tree854e35665f7754b3b0d1b4aaadc7b4927c3ea9ce /packages/FusedLocation
parent4ffa23379f95771fcdc63a2e35586b7e2c0b23a5 (diff)
downloadframeworks_base-ccbf84f44c9e6a5ed3c08673614826bb237afc54.zip
frameworks_base-ccbf84f44c9e6a5ed3c08673614826bb237afc54.tar.gz
frameworks_base-ccbf84f44c9e6a5ed3c08673614826bb237afc54.tar.bz2
Some system apps are more system than others
"signatureOrSystem" permissions are no longer available to all apps residing en the /system partition. Instead, there is a new /system/priv-app directory, and only apps whose APKs are in that directory are allowed to use signatureOrSystem permissions without sharing the platform cert. This will reduce the surface area for possible exploits of system- bundled applications to try to gain access to permission-guarded operations. The ApplicationInfo.FLAG_SYSTEM flag continues to mean what it is says in the documentation: it indicates that the application apk was bundled on the /system partition. A new hidden flag FLAG_PRIVILEGED has been introduced that reflects the actual right to access these permissions. At some point the "system" permission category will be renamed to "privileged". Bug 8765951 Change-Id: I6f0fd9cdb9170e076dfc66d83ecea76f8dd7335d
Diffstat (limited to 'packages/FusedLocation')
-rw-r--r--packages/FusedLocation/Android.mk1
1 files changed, 1 insertions, 0 deletions
diff --git a/packages/FusedLocation/Android.mk b/packages/FusedLocation/Android.mk
index 318782f..7406eaf4 100644
--- a/packages/FusedLocation/Android.mk
+++ b/packages/FusedLocation/Android.mk
@@ -23,5 +23,6 @@ LOCAL_JAVA_LIBRARIES := com.android.location.provider
LOCAL_PACKAGE_NAME := FusedLocation
LOCAL_CERTIFICATE := platform
+LOCAL_PRIVILEGED_MODULE := true
include $(BUILD_PACKAGE)