Skip to content
This repository has been archived by the owner on Oct 29, 2024. It is now read-only.

Feat clipboard access #503

Draft
wants to merge 316 commits into
base: 14
Choose a base branch
from

Conversation

octocorvus
Copy link
Contributor

This is an initial implementation for denying clipboard read access on a per-app basis. As of now, there isn't a way to explicitly paste clipboard content, so this feature is disabled by default, and can be turned on using the clipboard setting in the privacy section.

Depends On:
GrapheneOS/platform_packages_apps_Settings#236

@octocorvus octocorvus force-pushed the feat-clipboard-access branch from fdf36c3 to 6ce6622 Compare March 23, 2024 13:10
@octocorvus octocorvus marked this pull request as draft March 27, 2024 11:50
@octocorvus octocorvus force-pushed the feat-clipboard-access branch 4 times, most recently from 8d98122 to 90a76b1 Compare May 11, 2024 14:04
@octocorvus octocorvus marked this pull request as ready for review May 14, 2024 04:19
@octocorvus octocorvus force-pushed the feat-clipboard-access branch 4 times, most recently from 45ce741 to f5f693b Compare May 14, 2024 12:08
@octocorvus octocorvus force-pushed the feat-clipboard-access branch from 03270e5 to d85cc09 Compare June 28, 2024 08:53
@octocorvus octocorvus marked this pull request as draft June 28, 2024 08:53
@thestinger thestinger force-pushed the 14 branch 6 times, most recently from c151c14 to 26e77ce Compare July 7, 2024 02:48
@thestinger thestinger force-pushed the 14 branch 2 times, most recently from af7c305 to ebb62a9 Compare August 6, 2024 22:01
muhomorr and others added 4 commits August 12, 2024 20:19
Bug: 329205638
Test: pm set-user-restriction --user 0 no_config_brightness 1
Flag: ACONFIG com.android.systemui.enforce_brightness_base_user_restriction DEVELOPMENT
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:f9f3fdba4b4995b0ca45732b95de64318642e210)
Merged-In: I47b8b72a5a5c4098b46f0b5dbbf0654513b03aee
Change-Id: I47b8b72a5a5c4098b46f0b5dbbf0654513b03aee
RestrictedLockUtils#getShowAdminSupportDetailsIntent signature change
such that it no longer requires a context.

Flag: NA
Bug: 138786270
Test: built and flashed
(cherry picked from commit 4db275f0e5709bf94c13e6fee06cd90d83e1c988)
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:50341746d3b69ba34033e863c9f53c30c56aaa44)
Merged-In: If4ab3030cfa1f9faed5d099077e5e3bab2cba622
Change-Id: If4ab3030cfa1f9faed5d099077e5e3bab2cba622
This upstream feature checks that signatures of updated system apps verify against signatures of
the corresponding system apps.

Such checks are already performed downstream as part of PackageVerityExt, this upstream feature is
an extra layer of protection.
Previously, ACCESS_KEYGUARD_SECURE_STORAGE permission was enough to check that.

Presence of duress password is intended to be unknown unless the owner credential is provided. This
was enforced in the UI layer (Settings app) already, but could be bypassed through UI bugs, such
as the recently patched predictive back gesture bug:
GrapheneOS/platform_packages_apps_Settings@e6ac6fa
@octocorvus octocorvus force-pushed the feat-clipboard-access branch 2 times, most recently from 1bb59de to c95545b Compare August 14, 2024 11:52
@octocorvus octocorvus force-pushed the feat-clipboard-access branch from c95545b to f41869c Compare August 16, 2024 08:45
@thestinger thestinger force-pushed the 14 branch 3 times, most recently from edb3b08 to 6aa5c5d Compare September 4, 2024 00:01
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.