Mark @FlaggedApi flags as exported

An aconfig flag that is used together with @FlaggedApi must be marked as
`is_exported: true` to guarantee that the auto-generated lookup code
checks the actual flag value (instead of using a hard-coded value set at
compile time). This is important when the API is called across aconfig
container boundaries (e.g. a mainline module calling code on the system
partition).

Mark all non-exported flags used with @FlaggedApi as exported.

The "all @FlaggedApi flags are exported" invariant should be checked at
build time; this will be added in future CLs.

Bug: 378061535
Test: treehugger
Flag: EXEMPT can't flag changes to flag declarations
Merged-In: If45930e4afdcc87e374679ea73502651ce2de445
Change-Id: If45930e4afdcc87e374679ea73502651ce2de445

1 files changed, 2 insertions, 0 deletions

diff --git a/core/java/android/security/flags.aconfig b/core/java/android/security/flags.aconfig
index 5d1d7583d8f8..392b42d2d354 100644
--- a/core/java/android/security/flags.aconfig
+++ b/core/java/android/security/flags.aconfig
@@ -105,6 +105,7 @@ flag {
     namespace: "biometrics"
     description: "Clear StrongAuth on add credential"
     bug: "320817991"
+    is_exported: true
 }
 
 flag {
@@ -127,4 +128,5 @@ flag {
     namespace: "hardware_backed_security"
     description: "Feature flag for exposing KeyStore grant APIs"
     bug: "351158708"
+    is_exported: true
 }