seedvault/permissions_com.stevesoltys.seedvault.xml

<?xml version="1.0" encoding="utf-8"?>
<!--
  SPDX-FileCopyrightText: 2017 Steve Soltys
  SPDX-FileCopyrightText: 2020 The Calyx Institute
  SPDX-License-Identifier: Apache-2.0
  -->
<permissions>
    <privapp-permissions package="com.stevesoltys.seedvault">
        <permission name="android.permission.BACKUP"/>
        <permission name="android.permission.MANAGE_USB"/>
        <permission name="android.permission.INSTALL_PACKAGES"/>
        <permission name="android.permission.INTERACT_ACROSS_USERS_FULL"/>
        <permission name="android.permission.QUERY_USERS" />
        <permission name="android.permission.READ_LOGS"/>
        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
        <permission name="android.permission.MANAGE_EXTERNAL_STORAGE"/>
    </privapp-permissions>
</permissions>
Add priv-app permissions configuration 2017-10-01 16:43:24 -04:00			`<?xml version="1.0" encoding="utf-8"?>`
misc: Add SPDX copyright headers 2023-03-02 19:33:29 +02:00			`<!--`
			`SPDX-FileCopyrightText: 2017 Steve Soltys`
			`SPDX-FileCopyrightText: 2020 The Calyx Institute`
			`SPDX-License-Identifier: Apache-2.0`
			`-->`
Add priv-app permissions configuration 2017-10-01 16:43:24 -04:00			`<permissions>`
Rebrand application as 'Seedvault' 2019-10-28 21:57:47 -04:00			`<privapp-permissions package="com.stevesoltys.seedvault">`
Add priv-app permissions configuration 2017-10-01 16:43:24 -04:00			`<permission name="android.permission.BACKUP"/>`
Grant MANAGE_USB permission, so we can get USB serial numbers This is needed to reliably identify USB mass storage devices. If someone has several identical thumb drives, this prevents a backup from being performed when non-backup drives get attached. 2019-09-19 15:21:48 -03:00			`<permission name="android.permission.MANAGE_USB"/>`
Re-install backed-up APKs before restoring from backup 2019-12-20 13:55:38 -03:00			`<permission name="android.permission.INSTALL_PACKAGES"/>`
Allow secondary user backup to USB By default, Android exposes USB devices only to the main user. In order to query, read and write to it, the signature permission INTERACT_ACROSS_USERS_FULL (optional) is granted to create Seedvault's context as the system user. Issue: calyxos#437 Issue: https://github.com/seedvault-app/seedvault/issues/77 Change-Id: I0b1b4c8c5aeeb226419ff94e15f631ebe1db66df 2021-06-29 21:33:25 -04:00			`<permission name="android.permission.INTERACT_ACROSS_USERS_FULL"/>`
Include user profile name in backup name so it is easier to identify the right backup if more users backup to the same storage medium. Change-Id: I56fa93899da3764e20b6aee40adfd52722a05a9f 2024-02-12 12:01:38 -03:00			`<permission name="android.permission.QUERY_USERS" />`
Update permissions for log feature Update the bundled privileged permissions allowlist to include the newly-added READ_LOGS permission. Otherwise, Android will not boot with the latest version of Seedvault bundled. Change-Id: I10fd397c2c1b03201165d70a7e43d18642d1d236 2022-11-23 20:04:05 -05:00			`<permission name="android.permission.READ_LOGS"/>`
Disable automatic backups when a removable USB flash drive is used as storage location. The backup backoff time is not reliable for this as the system still attempts to backup the magic @pm@ package without checking for the backoff value. 2019-09-19 16:29:53 -03:00			`<permission name="android.permission.WRITE_SECURE_SETTINGS"/>`
Add storage library (and demo app) and use for periodic files backup 2021-01-19 09:14:52 -03:00			`<permission name="android.permission.MANAGE_EXTERNAL_STORAGE"/>`
Add priv-app permissions configuration 2017-10-01 16:43:24 -04:00			`</privapp-permissions>`
Add newline at the end of all files Change-Id: I85718a4d8254d27e36f1712e4430e82863ba721e 2021-08-25 17:31:40 +03:00			`</permissions>`