gosps: add flags for clipboard setting

GrapheneOS-Archive · Mar 17, 2024 · 6db320e · 6db320e
1 parent a388d2a
commit 6db320e
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/core/java/android/content/pm/GosPackageState.java b/core/java/android/content/pm/GosPackageState.java
@@ -78,6 +78,10 @@ public final class GosPackageState extends GosPackageStateBase implements Parcel
 
     /** @hide */ public static final int FLAG_HAS_PACKAGE_FLAGS = 1 << 25;
 
+    /** @hide */ public static final int FLAG_DENY_CLIPBOARD_READ_NON_DEFAULT = 1 << 26;
+    /** @hide */ public static final int FLAG_DENY_CLIPBOARD_READ = 1 << 27;
+    /** @hide */ public static final int FLAG_DENY_CLIPBOARD_READ_SUPPRESS_NOTIF = 1 << 28;
+
     // to distinguish between the case when no dflags are set and the case when dflags weren't calculated yet
     public static final int DFLAGS_SET = 1;
 

diff --git a/services/core/java/com/android/server/pm/GosPackageStatePmHooks.java b/services/core/java/com/android/server/pm/GosPackageStatePmHooks.java
@@ -659,6 +659,8 @@ static void init(PackageManagerService pm) {
                     | FLAG_FORCE_MEMTAG_NON_DEFAULT
                     | FLAG_FORCE_MEMTAG
                     | FLAG_ENABLE_EXPLOIT_PROTECTION_COMPAT_MODE
+                    | FLAG_DENY_CLIPBOARD_READ_NON_DEFAULT
+                    | FLAG_DENY_CLIPBOARD_READ
             ;
 
             final int settingsReadFlags = settingsReadWriteFlags
@@ -681,7 +683,8 @@ static void init(PackageManagerService pm) {
                     | FLAG_BLOCK_NATIVE_DEBUGGING_SUPPRESS_NOTIF
                     | FLAG_RESTRICT_MEMORY_DYN_CODE_EXEC_SUPPRESS_NOTIF
                     | FLAG_RESTRICT_STORAGE_DYN_CODE_EXEC_SUPPRESS_NOTIF
-                    | FLAG_FORCE_MEMTAG_SUPPRESS_NOTIF;
+                    | FLAG_FORCE_MEMTAG_SUPPRESS_NOTIF
+                    | FLAG_DENY_CLIPBOARD_READ_SUPPRESS_NOTIF;
 
             final int systemUidWriteFields =
                     FIELD_CONTACT_SCOPES // see onClearApplicationUserData() hook