tree 21240bddda60ebf5287fa4e0f80474e1336ac819
parent 4f6d0200bf2f0b3dc7a93ce02bbc88030bcb6ecf
author Svetoslav Ganov <svetoslavganov@google.com> 1483051018 -0800
committer gitbuildkicker <android-build@google.com> 1490310626 -0700

[DO NOT MERGE] Don't allow permission change to runtime

Prevent apps to change permission protection level to dangerous
from any other type as this would allow a privilege escalation
where an app adds a normal permission in other app's group and
then redefines it as dangerous leading to the group auto-grant.

Test: Added a CTS test which passes.

Bug: 33860747

Change-Id: I1ccf546f78ee79ff027cb98124be81c8e5265a82
(cherry picked from commit fe430be9f102893c95258cc81589df132b7d02b3)