tree b7d7358bfb8158a32f5e1c0b23e8ed8dbac4e8d3
parent d42e1204d5dddb78ec9d20d125951b59a8344f40
author Svetoslav Ganov <svetoslavganov@google.com> 1483051018 -0800
committer gitbuildkicker <android-build@google.com> 1490220100 -0700

[DO NOT MERGE] Don't allow permission change to runtime

Prevent apps to change permission protection level to dangerous
from any other type as this would allow a privilege escalation
where an app adds a normal permission in other app's group and
then redefines it as dangerous leading to the group auto-grant.

Test: Added a CTS test which passes.

Bug: 33860747

Change-Id: I1ccf546f78ee79ff027cb98124be81c8e5265a82
(cherry picked from commit fe430be9f102893c95258cc81589df132b7d02b3)