Update LockSettingsService to support hardened FRP
This change does three things:
1. Broadcasts a new protected intent to notify system apps such as
GMSCore of LSKF changes so they can react by updating FRP data.
2. Deactivates FRP (if active) when LSKF authentication is performed
using the FRP credential.
3. Modifies LockSettingsService to use the new PDB API to query for
FRP status, rather than relying on the SECURE_FRP_MODE property,
which can more easily be manipulated by attackers.
Ignore-AOSP-First: Depends on internal changes that can't go into AOSP yet.
Bug: 290312729
Test: atest com.android.server.locksettings
Change-Id: If15ab387e86b5cdcf271085d414ce39ff3a04a83
9 files changed