lineage: Enforce privapp-permissions whitelist

Change-Id: I1ca080e5addcc0876d7346f3cf09db8e8af39312
5 years ago · 214dfb9402
parent 4ec881366c
commit 214dfb9402
1 changed files with 4 additions and 0 deletions
--- a/config/common.mk
+++ b/config/common.mk
@ -89,6 +89,10 @@ PRODUCT_COPY_FILES += \
    vendor/lineage/config/permissions/privapp-permissions-lineage.xml:system/etc/permissions/privapp-permissions-lineage.xml \
    vendor/lineage/config/permissions/privapp-permissions-cm-legacy.xml:system/etc/permissions/privapp-permissions-cm-legacy.xml

+# Enforce privapp-permissions whitelist
+PRODUCT_SYSTEM_DEFAULT_PROPERTIES += \
+    ro.control_privapp_permissions=enforce
+
 # Hidden API whitelist
 PRODUCT_COPY_FILES += \
    vendor/lineage/config/permissions/lineage-hiddenapi-package-whitelist.xml:system/etc/permissions/lineage-hiddenapi-package-whitelist.xml