aboutsummaryrefslogtreecommitdiff
path: root/res/microg/permissions
diff options
context:
space:
mode:
Diffstat (limited to 'res/microg/permissions')
-rw-r--r--res/microg/permissions/apps/permissions-com.google.android.gms.xml27
-rw-r--r--res/microg/permissions/apps/permissions-google-sync.xml21
-rw-r--r--res/microg/permissions/priv-apps/com.google.android.maps.xml5
-rw-r--r--res/microg/permissions/priv-apps/privapp-permissions-org.microG.xml62
4 files changed, 115 insertions, 0 deletions
diff --git a/res/microg/permissions/apps/permissions-com.google.android.gms.xml b/res/microg/permissions/apps/permissions-com.google.android.gms.xml
new file mode 100644
index 0000000..bcb6fcf
--- /dev/null
+++ b/res/microg/permissions/apps/permissions-com.google.android.gms.xml
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Copyright (C) 2019 chris42 (based on work of ale5k and nanolx)
+ SPDX-License-Identifer: GPL-3.0-or-later
+ This file contains permissions to be granted by default.
+ Default permissions are granted to special platform components and to apps that are approved to get default grants.
+ The special components are apps that are expected to work out-of-the-box as they provide core use cases.
+ Fixed permissions cannot be controlled by the user and need a special approval.
+ Typically these are to ensure either legally mandated functions or the app is considered a part of the OS.
+ Granting these permissions could prevent issues on some ROMs or on non-clean installations.
+-->
+
+<exceptions>
+ <exception package="com.google.android.gms">
+ <!-- Phone -->
+ <permission name="android.permission.READ_PHONE_STATE" fixed="false"/>
+ <permission name="android.permission.RECEIVE_SMS" fixed="false" whitelisted="true" />
+ <!-- Account -->
+ <permission name="android.permission.READ_CONTACTS" fixed="false"/>
+ <permission name="android.permission.GET_ACCOUNTS" fixed="false"/>
+ <!-- Location -->
+ <permission name="android.permission.ACCESS_FINE_LOCATION" fixed="false"/>
+ <permission name="android.permission.ACCESS_COARSE_LOCATION" fixed="false"/>
+ <!-- Storage -->
+ <permission name="android.permission.READ_EXTERNAL_STORAGE" fixed="false"/>
+ <permission name="android.permission.WRITE_EXTERNAL_STORAGE" fixed="false"/>
+ </exception>
+</exceptions>
diff --git a/res/microg/permissions/apps/permissions-google-sync.xml b/res/microg/permissions/apps/permissions-google-sync.xml
new file mode 100644
index 0000000..a18f965
--- /dev/null
+++ b/res/microg/permissions/apps/permissions-google-sync.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Source: https://gitlab.com/Nanolx/NanoDroid/-/blob/master/Google/gsync/etc/default-permissions/google-sync-permissions.xml -->
+<exceptions>
+ <exception package="com.google.android.backuptransport">
+ <permission name="android.permission.READ_CONTACTS" fixed="false"></permission>
+ <permission name="android.permission.WRITE_CONTACTS" fixed="false"></permission>
+ <permission name="android.permission.GET_ACCOUNTS" fixed="false"></permission>
+ </exception>
+
+ <exception package="com.google.android.syncadapters.contacts">
+ <permission name="android.permission.READ_CONTACTS" fixed="false"></permission>
+ <permission name="android.permission.WRITE_CONTACTS" fixed="false"></permission>
+ <permission name="android.permission.GET_ACCOUNTS" fixed="false"></permission>
+ <permission name="com.google.android.googleapps.permission.GOOGLE_AUTH.cp" fixed="false"/>
+ </exception>
+
+ <exception package="com.google.android.syncadapters.calendar">
+ <permission name="android.permission.READ_CALENDAR" fixed="false"></permission>
+ <permission name="android.permission.WRITE_CALENDAR" fixed="false"></permission>
+ </exception>
+</exceptions>
diff --git a/res/microg/permissions/priv-apps/com.google.android.maps.xml b/res/microg/permissions/priv-apps/com.google.android.maps.xml
new file mode 100644
index 0000000..75c85b5
--- /dev/null
+++ b/res/microg/permissions/priv-apps/com.google.android.maps.xml
@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="utf-8"?>
+<permissions>
+ <library name="com.google.android.maps" file="/system/framework/com.google.android.maps.jar" />
+</permissions>
+
diff --git a/res/microg/permissions/priv-apps/privapp-permissions-org.microG.xml b/res/microg/permissions/priv-apps/privapp-permissions-org.microG.xml
new file mode 100644
index 0000000..8aeb2b2
--- /dev/null
+++ b/res/microg/permissions/priv-apps/privapp-permissions-org.microG.xml
@@ -0,0 +1,62 @@
+<!-- microG Installer -->
+<permissions>
+ <privapp-permissions package="com.google.android.gms">
+ <permission name="android.permission.LOCATION_HARDWARE"/>
+ <permission name="android.permission.MODIFY_PHONE_STATE"/>
+ <permission name="android.permission.NETWORK_SCAN"/>
+ <permission name="android.permission.UPDATE_DEVICE_STATS"/>
+ <permission name="android.permission.WATCH_APPOPS"/>
+ <permission name="android.permission.INSTALL_LOCATION_PROVIDER"/>
+ <permission name="android.permission.CHANGE_DEVICE_IDLE_TEMP_WHITELIST"/>
+ <permission name="android.permission.FAKE_PACKAGE_SIGNATURE"/>
+ <permission name="android.permission.UPDATE_APP_OPS_STATS"/>
+ <permission name="android.permission.MANAGE_USB" />
+ <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND" />
+ <permission name="android.permission.INTERACT_ACROSS_USERS" />
+ <permission name="android.permission.INTERACT_ACROSS_PROFILES" />
+ <permission name="android.permission.PROVIDE_REMOTE_CREDENTIALS" />
+ <permission name="android.permission.PROVIDE_DEFAULT_ENABLED_CREDENTIAL_SERVICE" />
+ <!-- %FAKE_PACKAGE_SIGNATURE% -->
+ </privapp-permissions>
+ <!-- For real Play Store; Fake Store will not use all except one (FAKE_PACKAGE_SIGNATURE) of them -->
+ <privapp-permissions package="com.android.vending">
+ <permission name="android.permission.ALLOCATE_AGGRESSIVE" />
+ <permission name="android.permission.BACKUP" />
+ <permission name="android.permission.BATTERY_STATS" />
+ <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE" />
+ <permission name="android.permission.CHANGE_DEVICE_IDLE_TEMP_WHITELIST" />
+ <permission name="android.permission.CHANGE_OVERLAY_PACKAGES" />
+ <permission name="android.permission.CLEAR_APP_CACHE" />
+ <permission name="android.permission.CONNECTIVITY_INTERNAL" />
+ <permission name="android.permission.DELETE_PACKAGES" />
+ <permission name="android.permission.DUMP" />
+ <permission name="android.permission.FAKE_PACKAGE_SIGNATURE" />
+ <permission name="android.permission.FORCE_STOP_PACKAGES" />
+ <permission name="android.permission.GET_ACCOUNTS_PRIVILEGED" />
+ <permission name="android.permission.GET_APP_OPS_STATS" />
+ <permission name="android.permission.INSTALL_PACKAGES" />
+ <permission name="android.permission.INTERACT_ACROSS_USERS" />
+ <permission name="android.permission.LOADER_USAGE_STATS" />
+ <permission name="android.permission.MANAGE_CLOUDSEARCH" />
+ <permission name="android.permission.MANAGE_ROLLBACKS" />
+ <permission name="android.permission.MANAGE_USERS" />
+ <permission name="android.permission.OVERRIDE_COMPAT_CHANGE_CONFIG_ON_RELEASE_BUILD" />
+ <permission name="android.permission.PACKAGE_USAGE_STATS" />
+ <deny-permission name="android.permission.PACKAGE_VERIFICATION_AGENT" />
+ <deny-permission name="android.permission.READ_PRIVILEGED_PHONE_STATE" />
+ <permission name="android.permission.READ_RUNTIME_PROFILES" />
+ <permission name="android.permission.REAL_GET_TASKS" />
+ <permission name="android.permission.REBOOT" />
+ <permission name="android.permission.SEND_DEVICE_CUSTOMIZATION_READY" />
+ <permission name="android.permission.SEND_SAFETY_CENTER_UPDATE" />
+ <deny-permission name="android.permission.SEND_SMS_NO_CONFIRMATION" />
+ <permission name="android.permission.SET_PREFERRED_APPLICATIONS" />
+ <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND" />
+ <permission name="android.permission.STATUS_BAR" />
+ <permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME" />
+ <permission name="android.permission.UPDATE_DEVICE_STATS" />
+ <permission name="android.permission.USE_INSTALLER_V2" />
+ <permission name="com.android.permission.USE_INSTALLER_V2" />
+ <permission name="android.permission.WRITE_SECURE_SETTINGS" />
+ </privapp-permissions>
+</permissions>