commit 3360edcdbaa122fec4032ce9bb11f7631d2a6c14
author Hai Zhang <zhanghai@google.com> Wed Nov 13 15:36:27 2019 -0800
committer Hai Zhang <zhanghai@google.com> Thu Jan 09 13:32:46 2020 -0800
tree f21af627c52bd590abcf7652f5b245273c15156c
parent fabf43932cbfd231b43374581b21610c5ebcbf9d

Add system gallery role.

Bug: 144307267
Bug: 136500975
Test: manually confirm that the system default gallery is granted
      privileges

Change-Id: I96c1463973c0e846bd3cf2d5224f53ba380b988b

PermissionController/res/xml/roles.xml

diff --git a/PermissionController/res/xml/roles.xml b/PermissionController/res/xml/roles.xml
index 76831e8..5206f99 100644
--- a/PermissionController/res/xml/roles.xml
+++ b/PermissionController/res/xml/roles.xml
@@ -418,4 +418,18 @@
             </service>
         </required-components>
     </role>
+
+    <role
+        name="android.app.role.SYSTEM_GALLERY"
+        defaultHolders="config_systemGallery"
+        exclusive="true"
+        systemOnly="true">
+        <permissions>
+            <permission-set name="storage" />
+            <permission name="android.permission.ACCESS_MEDIA_LOCATION" />
+        </permissions>
+        <app-ops>
+            <app-op name="android:manage_external_storage" mode="allowed" />
+        </app-ops>
+    </role>
 </roles>