From 2cbae66fcb2dfad6aa50ceba2c83dc2cea8ac121 Mon Sep 17 00:00:00 2001 From: paulhu Date: Fri, 18 Sep 2020 16:22:45 +0800 Subject: Add CONNECTIVITY_USE_RESTRICTED_NETWORKS permission to DownloadProvider - DownloadManager will use the requestor app's default network to open a connection. When the VPN app lists the DownloadProvider as a disallowed application, this will fail with EPERM. - This is because in R, the DownloadProvider lost its privileges due to the removal of the CONNECTIVITY_INTERNAL permission. It's removed without considering the corner case where the DownloadProvider is excluded from using the VPN. It's the only case where this makes a difference. - Adding CONNECTIVITY_USE_RESTRICTED_NETWORKS will give DownloadProvider the ability to use the VPN again in this case, fixing the issue. Bug: 165774987 Test: Build, flash rom and boot to home. Manully test that DownloadProvider can download file via VPN. Change-Id: If8fa785568ace1f15f53daec67c06e1207d5dc9c Merged-In: If8fa785568ace1f15f53daec67c06e1207d5dc9c --- data/etc/privapp-permissions-platform.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/data/etc/privapp-permissions-platform.xml b/data/etc/privapp-permissions-platform.xml index c710bed29361..3e93591bace0 100644 --- a/data/etc/privapp-permissions-platform.xml +++ b/data/etc/privapp-permissions-platform.xml @@ -219,6 +219,7 @@ applications that come with the platform + -- cgit v1.2.3-59-g8ed1b