summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorrazorloves <razorloves@gmail.com>2019-01-29 00:13:22 -0600
committerrazorloves <razorloves@gmail.com>2019-03-01 01:17:34 -0600
commit897394a9188c6dc320682e1cfa2a35ae4ee79b50 (patch)
tree94cd5c4562cdc09a4526622aeaab370f6c148eb2
parent20dbce7cdaaaf389a84d36af8494f5b19717c59d (diff)
marlin: Enforce privapp-permissions whitelist
Change-Id: Ibe17388f6989c3fb7208fa071f3a6eaeb19545f7
-rw-r--r--device-common.mk4
1 files changed, 4 insertions, 0 deletions
diff --git a/device-common.mk b/device-common.mk
index 8d09ed8b..c334433a 100644
--- a/device-common.mk
+++ b/device-common.mk
@@ -29,6 +29,10 @@ PRODUCT_SHIPPING_API_LEVEL := 25
# Setting vendor SPL
VENDOR_SECURITY_PATCH := "2019-02-05"
+# Enforce privapp-permissions whitelist
+PRODUCT_PROPERTY_OVERRIDES += \
+ ro.control_privapp_permissions=enforce
+
PRODUCT_COPY_FILES += \
frameworks/native/data/etc/android.software.verified_boot.xml:system/etc/permissions/android.software.verified_boot.xml