La.br.1.2.6 rb1.12

appops/Android.mk

@@ -0,0 +1,19 @@
+define validate-xml-file
+	@echo "validating xml: $2"
+	@xmllint --noout --schema $1 $2
+endef
+LOCAL_PATH:= $(call my-dir)
+#######################################
+
+include $(CLEAR_VARS)
+LOCAL_MODULE_CLASS := ETC
+LOCAL_MODULE := appops_policy.xml
+APPOPS_POLICY_XSD_FILE := $(LOCAL_PATH)/appops_policy.xsd
+include $(BUILD_SYSTEM)/base_rules.mk
+
+$(LOCAL_BUILT_MODULE): $(LOCAL_PATH)/appops_policy.xml $(APPOPS_POLICY_XSD_FILE) $(ACP)
+	@echo Validating $<
+	@xmllint --noout --schema $(APPOPS_POLICY_XSD_FILE) $<
+	$(copy-file-to-target)
+#######################################
+

appops/README.txt

@@ -0,0 +1,125 @@
+===============================================================================
+Copyright (c) 2014, The Linux Foundation. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+    * Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above
+      copyright notice, this list of conditions and the following
+      disclaimer in the documentation and/or other materials provided
+      with the distribution.
+    * Neither the name of The Linux Foundation nor the names of its
+      contributors may be used to endorse or promote products derived
+      from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
+WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
+ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
+BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
+BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
+IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+===============================================================================
+
+1. Introduction:
+----------------
+    Android provides support for AppOps service to manage and control
+    user-permissions of different operations of installed packages.
+
+    AppOps service reads /system/etc/appops_policy.xml file to read all default
+    user-permissions of different operations of installed packages.
+
+2. AppOps Policy File:
+----------------------
+    AppOps policy file can be used to assign default permissions to both system
+    and user installed applications. Since hardcoded in AppOpsService this file
+    should be at /system/etc/appops_policy.xml path on the device.
+
+    Following section talks about various tags used in appops_policy.xml file:
+
+    2.1 appops-policy
+    This is the root tag of appops_policy file.
+
+        Parameters:
+        i) version (Required) -This parameter defines the version of
+            appops_policy.xml format. It should be set to "1".
+
+        Tags:
+        i) user-app - section to configure default permissions of user
+                      installed apps.
+        ii) system-app - section to configure default permissions of preset
+                         (system) apps
+        iii) application - section to override default permission of particular
+                           packages.
+    2.2 user-app
+    This tag is used to set default permission of user installed applications.
+
+    Parameters:
+    i) permission - To set default permission of all user installed apps.
+    ii) show - To show/hide operations in app ops settings activity.
+
+    Tags:
+    <None>
+
+    2.3 system-app
+    This tag is used to set default permission of preset installed applications.
+
+    Parameters:
+    i) permission - To set default permission of all system installed apps.
+    ii) show - To show/hide operations in app ops settings activity.
+
+    Tags:
+    <None>
+
+    2.4 application
+    This tag is used to set default permission of specific applications.
+
+    Parameters:
+    <None>
+
+    Tags:
+    i) pkg - section to set default permission of specific package.
+
+    2.5 pkg
+    This tag is used to set default permission of specific package.
+
+    Parameters:
+    i) name - To specify name of the package.
+    ii) type - To set if package is part of preset or user installed application.
+    iii) permission - To set default permission of package's all operations.
+    iv) show - To show/hide operations in app ops settings activity.
+
+    Tags:
+    i) op - section to set defualt permission of an operation.
+
+    2.5 op
+    This tag is used to set default permission of specific operation
+
+    Parameters:
+    i) name - To specify name of the operation
+    ii) permission - To set default permisison of operation
+    iii) show - To show/hide operation in app ops settings activity.
+
+3 Example:
+----------
+<appops-policy version="1">
+    <user-app permission="ask" show="true"/>
+    <system-app permission="allowed" show="false"/>
+
+    <application>
+        <pkg name="com.android.dialer" type="system-app">
+            <op name="android:call_phone" permission="ask" show="true"/>
+        </pkg>
+        <pkg name="com.xyz.abc" type="system-app" permission="allowed" show="false">
+            <op name="android:fine_location" permission="ask" show="true"/>
+            <op name="android:monitor_location" permission="ask" show="true"/>
+        </pkg>
+    </application>
+</appops-policy>
+

appops/appops_policy.xml

@@ -0,0 +1,50 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+<!--
+/* Copyright (c) 2014, The Linux Foundation. All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are
+ * met:
+ *     * Redistributions of source code must retain the above copyright
+ *       notice, this list of conditions and the following disclaimer.
+ *     * Redistributions in binary form must reproduce the above
+ *       copyright notice, this list of conditions and the following
+ *       disclaimer in the documentation and/or other materials provided
+ *       with the distribution.
+ *     * Neither the name of The Linux Foundation nor the names of its
+ *       contributors may be used to endorse or promote products derived
+ *       from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
+ * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+ * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
+ * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+ * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+ * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
+ * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+ * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+ * OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
+ * IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+-->
+<appops-policy version="1">
+    <user-app permission="ask" show="true"/>
+    <system-app permission="allowed" show="false"/>
+
+    <application>
+    <!-- Example:
+
+        <pkg name="com.android.dialer" type="system-app">
+            <op name="android:call_phone" permission="ask" show="true"/>
+        </pkg>
+
+    -->
+        <pkg name="com.android.calendar" type="system-app">
+            <op name="android:read_contacts" permission="ask" show="true"/>
+        </pkg>
+        <pkg name="com.android.email" type="system-app">
+            <op name="android:read_contacts" permission="ask" show="true"/>
+        </pkg>
+   </application>
+</appops-policy>

appops/appops_policy.xsd

@@ -0,0 +1,165 @@
+<xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
+<!--
+/* Copyright (c) 2014, The Linux Foundation. All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are
+ * met:
+ *     * Redistributions of source code must retain the above copyright
+ *       notice, this list of conditions and the following disclaimer.
+ *     * Redistributions in binary form must reproduce the above
+ *       copyright notice, this list of conditions and the following
+ *       disclaimer in the documentation and/or other materials provided
+ *       with the distribution.
+ *     * Neither the name of The Linux Foundation nor the names of its
+ *       contributors may be used to endorse or promote products derived
+ *       from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
+ * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+ * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
+ * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+ * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+ * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
+ * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+ * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+ * OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
+ * IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+-->
+  <xs:simpleType name="showType">
+    <xs:restriction base="xs:string">
+      <xs:enumeration value="true"/>
+      <xs:enumeration value="false"/>
+    </xs:restriction>
+  </xs:simpleType>
+
+  <xs:simpleType name="permissionType">
+    <xs:restriction base="xs:string">
+      <xs:enumeration value="allowed"/>
+      <xs:enumeration value="ask"/>
+    </xs:restriction>
+  </xs:simpleType>
+
+  <xs:simpleType name="opType">
+    <xs:restriction base="xs:string">
+        <xs:enumeration value= "android:coarse_location"/>
+        <xs:enumeration value= "android:fine_location"/>
+        <xs:enumeration value= "android:gps"/>
+        <xs:enumeration value= "android:vibrate"/>
+        <xs:enumeration value= "android:read_contacts"/>
+        <xs:enumeration value= "android:write_contacts"/>
+        <xs:enumeration value= "android:read_call_log"/>
+        <xs:enumeration value= "android:write_call_log"/>
+        <xs:enumeration value= "android:read_calendar"/>
+        <xs:enumeration value= "android:write_calendar"/>
+        <xs:enumeration value= "android:wifi_scan"/>
+        <xs:enumeration value= "android:post_notification"/>
+        <xs:enumeration value= "android:neighboring_cells"/>
+        <xs:enumeration value= "android:call_phone"/>
+        <xs:enumeration value= "android:read_sms"/>
+        <xs:enumeration value= "android:write_sms"/>
+        <xs:enumeration value= "android:receive_sms"/>
+        <xs:enumeration value= "android:receive_emergecy_sms"/>
+        <xs:enumeration value= "android:receive_mms"/>
+        <xs:enumeration value= "android:receive_wap_push"/>
+        <xs:enumeration value= "android:send_sms"/>
+        <xs:enumeration value= "android:read_icc_sms"/>
+        <xs:enumeration value= "android:write_icc_sms"/>
+        <xs:enumeration value= "android:write_settings"/>
+        <xs:enumeration value= "android:system_alert_window"/>
+        <xs:enumeration value= "android:access_notifications"/>
+        <xs:enumeration value= "android:camera"/>
+        <xs:enumeration value= "android:record_audio"/>
+        <xs:enumeration value= "android:play_audio"/>
+        <xs:enumeration value= "android:read_clipboard"/>
+        <xs:enumeration value= "android:write_clipboard"/>
+        <xs:enumeration value= "android:take_media_buttons"/>
+        <xs:enumeration value= "android:take_audio_focus"/>
+        <xs:enumeration value= "android:audio_master_volume"/>
+        <xs:enumeration value= "android:audio_voice_volume"/>
+        <xs:enumeration value= "android:audio_ring_volume"/>
+        <xs:enumeration value= "android:audio_media_volume"/>
+        <xs:enumeration value= "android:audio_alarm_volume"/>
+        <xs:enumeration value= "android:audio_notification_volume"/>
+        <xs:enumeration value= "android:audio_bluetooth_volume"/>
+        <xs:enumeration value= "android:wake_lock"/>
+        <xs:enumeration value= "android:monitor_location"/>
+        <xs:enumeration value= "android:monitor_high_power_location"/>
+        <xs:enumeration value= "android:wifi_change"/>
+        <xs:enumeration value= "android:bluetooth_change"/>
+        <xs:enumeration value= "android:data_connect_change"/>
+        <xs:enumeration value= "android:send_mms"/>
+        <xs:enumeration value= "android:read_mms"/>
+        <xs:enumeration value= "android:write_mms"/>
+        <xs:enumeration value= "android:boot_completed"/>
+        <xs:enumeration value= "android:nfc_change"/>
+    </xs:restriction>
+  </xs:simpleType>
+
+  <xs:simpleType name="appType">
+    <xs:restriction base="xs:string">
+      <xs:enumeration value="system-app"/>
+      <xs:enumeration value="user-app"/>
+    </xs:restriction>
+  </xs:simpleType>
+
+  <xs:element name="appops-policy">
+    <xs:complexType>
+      <xs:sequence>
+        <xs:element name="user-app">
+          <xs:complexType>
+            <xs:simpleContent>
+              <xs:extension base="xs:string">
+                <xs:attribute type="permissionType" name="permission" use="required"/>
+                <xs:attribute type="showType" name="show" use="required"/>
+              </xs:extension>
+            </xs:simpleContent>
+          </xs:complexType>
+        </xs:element>
+
+        <xs:element name="system-app">
+          <xs:complexType>
+            <xs:simpleContent>
+              <xs:extension base="xs:string">
+                <xs:attribute type="permissionType" name="permission" use="required"/>
+                <xs:attribute type="showType" name="show" use="required"/>
+              </xs:extension>
+            </xs:simpleContent>
+          </xs:complexType>
+        </xs:element>
+
+        <xs:element name="application">
+          <xs:complexType>
+            <xs:sequence>
+              <xs:element name="pkg" maxOccurs="unbounded" minOccurs="0">
+                <xs:complexType>
+                  <xs:sequence>
+                    <xs:element name="op" maxOccurs="unbounded" minOccurs="0">
+                      <xs:complexType>
+                        <xs:simpleContent>
+                          <xs:extension base="xs:string">
+                            <xs:attribute type="opType" name="name" use="required"/>
+                            <xs:attribute type="permissionType" name="permission" use="required"/>
+                            <xs:attribute type="showType" name="show" use="required"/>
+                          </xs:extension>
+                        </xs:simpleContent>
+                      </xs:complexType>
+                    </xs:element>
+                  </xs:sequence>
+                  <xs:attribute type="xs:string" name="name" use="required"/>
+                  <xs:attribute type="appType" name="type" use="required"/>
+                  <xs:attribute type="permissionType" name="permission" use="optional"/>
+                  <xs:attribute type="showType" name="show" use="optional"/>
+                </xs:complexType>
+              </xs:element>
+            </xs:sequence>
+          </xs:complexType>
+        </xs:element>
+
+      </xs:sequence>
+      <xs:attribute type="xs:byte" name="version"/>
+    </xs:complexType>
+  </xs:element>
+</xs:schema>