1<?xml version='1.0' encoding='utf-8' standalone='yes' ?> 2 3<!-- Copyright (C) 2019 Google Inc. 4 5 Licensed under the Apache License, Version 2.0 (the "License"); 6 you may not use this file except in compliance with the License. 7 You may obtain a copy of the License at 8 9 http://www.apache.org/licenses/LICENSE-2.0 10 11 Unless required by applicable law or agreed to in writing, software 12 distributed under the License is distributed on an "AS IS" BASIS, 13 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 14 See the License for the specific language governing permissions and 15 limitations under the License. 16--> 17 18<!-- 19 This file contains permissions to be granted by default. Default 20 permissions are granted to special platform components and to apps 21 that are approved to get default grants. The special components 22 are apps that are expected tto work out-of-the-box as they provide 23 core use cases such as default dialer, default email, etc. These 24 grants are managed by the platform. The apps that are additionally 25 approved for default grants are ones that provide carrier specific 26 functionality, ones legally required at some location, ones providing 27 alternative disclosure and opt-out UI, ones providing highlight features 28 of a dedicated device, etc. This file contains only the latter exceptions. 29 Fixed permissions cannot be controlled by the user and need a special 30 approval. Typically these are to ensure either legally mandated functions 31 or the app is considered a part of the OS. 32--> 33 34<exceptions> 35 36 <!-- This is an example of an exception: 37 <exception 38 package="foo.bar.permission" 39 <permission name="android.permission.READ_CONTACTS" fixed="true"/> 40 <permission name="android.permission.READ_CALENDAR" fixed="false"/> 41 </exception> 42 --> 43 44 <exception package="com.google.android.settings.intelligence"> 45 <!-- Calendar --> 46 <permission name="android.permission.READ_CALENDAR" fixed="true"/> 47 <!-- Location --> 48 <permission name="android.permission.ACCESS_FINE_LOCATION" fixed="false"/> 49 <permission name="android.permission.ACCESS_BACKGROUND_LOCATION" fixed="false"/> 50 <!-- Battery Widget --> 51 <permission name="android.permission.BLUETOOTH_CONNECT" fixed="false"/> 52 </exception> 53 54 <exception package="com.google.android.apps.camera.services"> 55 <!-- Camera --> 56 <permission name="android.permission.CAMERA" fixed="false"/> 57 <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/> 58 <permission name="android.permission.BLUETOOTH_CONNECT" fixed="false"/> 59 <permission name="android.permission.BLUETOOTH_SCAN" fixed="false"/> 60 </exception> 61 62 <exception package="com.google.android.apps.cbrsnetworkmonitor"> 63 <!-- Location access to create CBRS geofences--> 64 <permission name="android.permission.ACCESS_FINE_LOCATION" fixed="true"/> 65 <permission name="android.permission.ACCESS_BACKGROUND_LOCATION" fixed="true"/> 66 </exception> 67 68 <exception package="com.google.android.apps.scone"> 69 <!-- NLP Location access to determine proximity to country border --> 70 <permission name="android.permission.ACCESS_COARSE_LOCATION" fixed="false"/> 71 <permission name="android.permission.ACCESS_BACKGROUND_LOCATION" fixed="false"/> 72 <!-- Used to call ActivityTransition API for Smart PNO --> 73 <permission name="android.permission.ACTIVITY_RECOGNITION" fixed="false"/> 74 <!-- Notifications --> 75 <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/> 76 </exception> 77 78 <exception 79 package="com.google.android.apps.restore"> 80 <!-- External storage --> 81 <permission name="android.permission.READ_EXTERNAL_STORAGE" fixed="false"/> 82 <permission name="android.permission.WRITE_EXTERNAL_STORAGE" fixed="false"/> 83 <!-- Contacts --> 84 <permission name="android.permission.READ_CONTACTS" fixed="false"/> 85 <permission name="android.permission.WRITE_CONTACTS" fixed="false"/> 86 <!-- Call logs --> 87 <permission name="android.permission.READ_CALL_LOG" fixed="false"/> 88 <permission name="android.permission.WRITE_CALL_LOG" fixed="false"/> 89 <!-- Used to set up a Wi-Fi P2P network --> 90 <permission name="android.permission.NEARBY_WIFI_DEVICES" fixed="false"/> 91 <!-- Notifications --> 92 <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/> 93 </exception> 94 95 <exception 96 package="com.verizon.mips.services"> 97 <!-- Call --> 98 <permission name="android.permission.PROCESS_OUTGOING_CALLS" fixed="false"/> 99 <!-- Phone --> 100 <permission name="android.permission.READ_PHONE_STATE" fixed="false"/> 101 <!-- SMS --> 102 <permission name="android.permission.RECEIVE_SMS" fixed="false"/> 103 </exception> 104 105 <exception 106 package="com.google.android.factorytest"> 107 <!-- Camera --> 108 <permission name="android.permission.CAMERA" fixed="false"/> 109 <!-- Microphone --> 110 <permission name="android.permission.RECORD_AUDIO" fixed="false"/> 111 <!-- Storage --> 112 <permission name="android.permission.READ_EXTERNAL_STORAGE" fixed="false"/> 113 <permission name="android.permission.WRITE_EXTERNAL_STORAGE" fixed="false"/> 114 </exception> 115 116 <exception package="com.google.android.wfcactivation"> 117 <!-- SMS --> 118 <permission name="android.permission.RECEIVE_WAP_PUSH" fixed="false"/> 119 <!-- Notifications --> 120 <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/> 121 </exception> 122 123 <exception package="com.google.android.apps.accessibility.voiceaccess"> 124 <!-- Voice Access: A11y app to allow users to setup & control their devices with voice --> 125 <!-- Approved android bug for pregrant permissions: b/182307492 --> 126 127 <!-- Phone state to turn off Voice Access when user is in a phone call --> 128 <permission name="android.permission.READ_PHONE_STATE" fixed="false"/> 129 130 <!-- Microphone: To hear user's voice commands --> 131 <permission name="android.permission.RECORD_AUDIO" fixed="false"/> 132 </exception> 133 <exception 134 package="com.google.android.deskclock"> 135 <!-- Notifications --> 136 <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/> 137 </exception> 138 <exception 139 package="com.google.android.apps.tips"> 140 <!-- Notifications --> 141 <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/> 142 </exception> 143 <exception 144 package="com.google.android.apps.work.oobconfig"> 145 <!-- Notifications --> 146 <permission name="android.permission.POST_NOTIFICATIONS" fixed="true"/> 147 </exception> 148</exceptions> 149 150