Restrict MANAGE_VIRTUAL_MACHINE to platform signed apps
This may be loosened in the future, but for now only apps signed with
the platform key can create VMs.
Bug: 193373841
Test: Microdroid demo app, platform signed, still works.
Change-Id: I472730f51b912f71009314753a438e4117c6f71e
diff --git a/javalib/AndroidManifest.xml b/javalib/AndroidManifest.xml
index 21857f8..f96b39f 100644
--- a/javalib/AndroidManifest.xml
+++ b/javalib/AndroidManifest.xml
@@ -18,7 +18,7 @@
package="com.android.virtualmachine.res">
<permission android:name="android.permission.MANAGE_VIRTUAL_MACHINE"
- android:protectionLevel="normal" />
+ android:protectionLevel="signature" />
<permission android:name="android.permission.DEBUG_VIRTUAL_MACHINE"
android:protectionLevel="signature" />