ferrochrome: Add privapp permissions allowlist
Test: m, boot
Change-Id: I427652fe5d9f8da0055be13eaccd96a1840891cf
diff --git a/ferrochrome_app/Android.bp b/ferrochrome_app/Android.bp
index 29a16d0..9f0c735 100644
--- a/ferrochrome_app/Android.bp
+++ b/ferrochrome_app/Android.bp
@@ -11,7 +11,17 @@
system_ext_specific: true,
privileged: true,
init_rc: ["custom_vm_setup.rc"],
- required: ["custom_vm_setup"],
+ required: [
+ "custom_vm_setup",
+ "privapp-permissions-ferrochrome.xml",
+ ],
+}
+
+prebuilt_etc {
+ name: "privapp-permissions-ferrochrome.xml",
+ src: "privapp-permissions-ferrochrome.xml",
+ sub_dir: "permissions",
+ system_ext_specific: true,
}
sh_binary {
diff --git a/ferrochrome_app/privapp-permissions-ferrochrome.xml b/ferrochrome_app/privapp-permissions-ferrochrome.xml
new file mode 100644
index 0000000..987db9c
--- /dev/null
+++ b/ferrochrome_app/privapp-permissions-ferrochrome.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<permissions>
+ <privapp-permissions package="com.android.virtualization.ferrochrome">
+ <permission name="android.permission.KILL_ALL_BACKGROUND_PROCESSES"/>
+ </privapp-permissions>
+</permissions>
\ No newline at end of file