Hide sensitive clipboard content in edit clipboard activity#249

Open

Inhishonor wants to merge 332 commits intoGrapheneOS:16from

Inhishonor:hide-sensitive-clipboard

This pull request is big! We're only showing the most recent 250 commits

Commits on Jun 15, 2025

infrastructure for the Storage Scopes feature

muhomorr
authored and
muhomorr2
committed
sscopes: temp: disable incomplete handling of READ_MEDIA_VISUAL_USER_SELECTED

muhomorr
authored and
muhomorr2
committed
control access to Android/obb directory with a GosPackageState flag

muhomorr
authored and
muhomorr2
committed
ErrorDialogController: do not auto-dismiss crash dialogs

muhomorr
authored and
muhomorr2
committed
fix ANR details link not working in profiles and in secondary users

muhomorr
authored and
muhomorr2
committed
include path of ANR stack traces file in ApplicationErrorReport

muhomorr
authored and
muhomorr2
committed
don't block reading ANR stack traces file via Unix file permissions

muhomorr
authored and
muhomorr2
committed
add option to view application error details in LogViewer app

muhomorr
authored and
muhomorr2
committed
Set always-on and lockdown on by default on first vpn connection at system_server side

quh4gko8
authored and
muhomorr2
committed
pre-grant POST_NOTIFICATIONS to more system apps

muhomorr
authored and
muhomorr2
committed
allow privileged installer to search for packages across all users

muhomorr
authored and
muhomorr2
committed
extend original-package renaming to provider authorities for Vanadium

muhomorr
authored and
muhomorr2
committed
extend original-package renaming to static launcher shortcuts

muhomorr
authored and
muhomorr2
committed
disable package parser cache

muhomorr
authored and
muhomorr2
committed
perform additional boot-time checks on system package updates

muhomorr
authored and
muhomorr2
committed
allow out-of-band package updates to use original-package system

muhomorr
authored and
muhomorr2
committed
require fs-verity when installing system package updates

muhomorr
authored and
muhomorr2
committed
don't allow updating system packages to the same versionCode

muhomorr
authored and
muhomorr2
committed
allow privileged installers to use getSharedLibraries(MATCH_ANY_USER)

muhomorr
authored and
muhomorr2
committed
allow only first party app source and shell to update system packages

muhomorr
authored and
muhomorr2
committed
Remove build fingerprint from screenshot EXIF

x86pup
authored and
muhomorr2
committed
add toggle for screenshot timestamp EXIF metadata

x86pup
authored and
muhomorr2
committed
SUPL: Don't send IMSI / Phone number to SUPL server

MSe1969
authored and
muhomorr2
committed
add GNSS SUPL setting

muhomorr
authored and
muhomorr2
committed
allow privileged installers to maintain a global list of busy packages

muhomorr
authored and
muhomorr2
committed
add option to scramble PIN layout

muhomorr
authored and
muhomorr2
committed
enable LOCK_PIN_ENHANCED_PRIVACY setting by default

muhomorr
authored and
muhomorr2
committed
don't crash apps that depend on missing Gservices provider

muhomorr
authored and
muhomorr2
committed
integrate Google's EuiccSupportPixel package

muhomorr
authored and
muhomorr2
committed
integrate Google's eUICC LPA package (EuiccGoogle)

muhomorr
authored and
muhomorr2
committed
do not auto-grant Camera permission to the eUICC LPA UI app

muhomorr
authored and
muhomorr2
committed
add a method for sending BOOT_COMPLETED broadcast to a specific package

muhomorr
authored and
muhomorr2
committed
define READ_DEVICE_SERIAL_NUMBER permission for Build.getSerial() access

muhomorr
authored and
muhomorr2
committed
aauto: define a restricted version of the MANAGE_USB permission

muhomorr
authored and
muhomorr2
committed
aauto: add definition of restricted BLUETOOTH_PRIVILEGED permission

muhomorr
authored and
muhomorr2
committed
aauto: add definition of restricted WIFI_PRIVILEGED permission

muhomorr
authored and
muhomorr2
committed
aauto: add definition of restricted READ_PRIVILEGED_PHONE_STATE permission

muhomorr
authored and
muhomorr2
committed
adjust definition of TelecomManager.getUserSelectedOutgoingPhoneAccount()

muhomorr
authored and
muhomorr2
committed
aauto: support using aauto USB accessory activity as a default activity

muhomorr
authored and
muhomorr2
committed
aauto: define ASSOCIATE_COMPANION_DEVICES_RESTRICTED permission

muhomorr
authored and
muhomorr2
committed
aauto: support allowing association with "automotive projection" devices

muhomorr
authored and
muhomorr2
committed
add BinderWrapper

muhomorr
authored and
muhomorr2
committed
gmscompat: add compatibility layer for unprivileged GMS

thestinger
authored and
muhomorr2
committed
require vendor camera extensions package to be a system app by default

muhomorr
authored and
muhomorr2
committed
add config for Pixel Camera Services

muhomorr
authored and
muhomorr2
committed
infrastructure for creating per-package seinfo overrides

muhomorr
authored and
muhomorr2
committed
support denying special access to hardware accelerators by Google apps

muhomorr
authored and
muhomorr2
committed
add GNSS PSDS setting

muhomorr
authored and
muhomorr2
committed
support redirecting ContentProvider calls to another provider

muhomorr
authored and
muhomorr2
committed
infrastructure for the Contact Scopes feature

muhomorr
authored and
muhomorr2
committed
add connectivity checks setting and its migration from Settings.Global

muhomorr
authored and
muhomorr2
committed
Wi-Fi auto turn off

authored and
muhomorr2
committed
Bluetooth auto turn off

authored and
muhomorr2
committed
add support for hooking LocationManager methods

muhomorr
authored and
muhomorr2
committed
improve compat with apps that try to access network location provider

muhomorr
authored and
muhomorr2
committed
add RemoteKeyProvisioning server override setting

muhomorr
authored and
muhomorr2
committed
don't skip AOT compilation of apps that weren't recently used

muhomorr
authored and
muhomorr2
committed
do not delete compiled code (OAT files) of hibernated apps

muhomorr
authored and
muhomorr2
committed
disable OtaDexoptService

muhomorr
authored and
muhomorr2
committed
add notification-based UI for the background dexopt job

muhomorr
authored and
muhomorr2
committed
infrastructure for per-package dex2oat compiler filter overrides

muhomorr
authored and
muhomorr2
committed
always use speed dex2oat compiler filter for VPN service packages

muhomorr
authored and
muhomorr2
committed
add helper class for notifications that link AppSwitch UI

muhomorr
authored and
muhomorr2
committed
infrastructure for passing extra args to Zygote and WebViewZygote

muhomorr
authored and
muhomorr2
committed
infrastructure for passing SELinux flags to the kernel

muhomorr
authored and
muhomorr2
committed
add per-app setting for hardened_malloc and extended VA space

muhomorr
authored and
muhomorr2
committed
always stop app zygotes when app is being force-stopped

muhomorr
authored and
muhomorr2
committed
add per-app native debugging setting

muhomorr
authored and
muhomorr2
committed
add system API for getting app info by PID

muhomorr
authored and
muhomorr2
committed
infrastructure for handling callbacks from logd to system_server

muhomorr
authored and
muhomorr2
committed
infrastructure for showing notifications about SELinux TSEC_FLAG denials

muhomorr
authored and
muhomorr2
committed
show notification after app is blocked from accessing ptrace

muhomorr
authored and
muhomorr2
committed
fix rate limiting for non-app tombstones

muhomorr
authored and
muhomorr2
committed
DropBoxManager: fix TreeSet API contract violations

muhomorr
authored and
muhomorr2
committed
fix an upstream race condition in handling of system error files

muhomorr
authored and
muhomorr2
committed
DropBox: skip spurious system_server_crash entries

muhomorr
authored and
muhomorr2
committed
DropBox: skip fsck.f2fs results that don't contain errors

muhomorr
authored and
muhomorr2
committed
notify the user about notable system journal entries

muhomorr
authored and
muhomorr2
committed
support for per-app dynamic code loading restrictions

muhomorr
authored and
muhomorr2
committed
add test for SELinux flags-based per-app hardening features

muhomorr
authored and
muhomorr2
committed
add per-app memory tagging setting

muhomorr
authored and
muhomorr2
committed
Widevine provisioning setting

maade93791
authored and
muhomorr2
committed
hide from Aurora Store packages that it's not allowed to update

muhomorr
authored and
muhomorr2
committed
run full explicit GC in SystemUI and system_server after locking

thestinger
authored and
muhomorr2
committed
add UsbManager API for configuring USB port security state

muhomorr
authored and
muhomorr2
committed
add setting for USB port security state

muhomorr
authored and
muhomorr2
committed
Do not use filter calling uid parameter originally intended for instant apps

quh4gko8
authored and
muhomorr2
committed
Disallow the camera shortcut toggle from the lockscreen

neelchauhan
authored and
muhomorr2
committed
disable support for adoptable storage

muhomorr
authored and
muhomorr2
committed
add a helper class for wiping eUICCs

muhomorr
authored and
muhomorr2
committed
extend the upstream wipe-without-reboot implementation

muhomorr
authored and
muhomorr2
committed
add duress password feature

muhomorr
authored and
muhomorr2
committed
add lock_settings shell commands for testing the duress password feature

muhomorr
authored and
muhomorr2
committed
add lock_settings shell command option for printing executed Weaver ops

muhomorr
authored and
muhomorr2
committed
add a test for the duress password feature

muhomorr
authored and
muhomorr2
committed
fix ApplicationInfo flag initialization being skipped in some cases

muhomorr
authored and
muhomorr2
committed
stub out reads of hidden system settings in Google's text-to-speech app

muhomorr
authored and
muhomorr2
committed
make Google's text-to-speech app force-queryable

muhomorr
authored and
muhomorr2
committed
show a deprecation warning dialog on each launch of a 32-bit app

muhomorr
authored and
muhomorr2
committed
better 32-bit deprecation warning

thestinger
authored and
muhomorr2
committed
fix touch-to-unlock on Google devices with side fingerprint scanner

muhomorr
authored and
muhomorr2
committed
add setting for alternative touchscreen mode

muhomorr
authored and
muhomorr2
committed
don't report some android.hardware.bluetooth-service.bcmbtlinux crashes

muhomorr
authored and
muhomorr2
committed
don't report harmless fingerprint-service.goodix crash

muhomorr
authored and
muhomorr2
committed
sysconfig: support enabling association restrictions without exemptions

muhomorr
authored and
muhomorr2
committed
add config for Pixel Health app

muhomorr
authored and
muhomorr2
committed
new PermissionService: implement shouldBlockGrantRuntimePermission()

muhomorr
authored and
muhomorr2
committed
new PermissionService: implement updatePermissions()

muhomorr
authored and
muhomorr2
committed
new PermissionService: implement PackageHooks support

muhomorr
authored and
muhomorr2
committed
new PermissionService: support for special runtime permissions

muhomorr
authored and
muhomorr2
committed
temp: unconditionally enable system crash notifications

muhomorr
authored and
muhomorr2
committed
Revert "temp: unconditionally enable system crash notifications"
muhomorr2
committed
ignore factory reset protection (FRP)

muhomorr
authored and
muhomorr2
committed
disable memory tagging for Pixel Camera Services

muhomorr
authored and
muhomorr2
committed
don't remove app widgets from user's home screen when the user stops

authored and
muhomorr2
committed
raise backup transport timeout

thestinger
authored and
muhomorr2
committed
add utility class for obtaining and keeping track of Binder caller info

muhomorr
authored and
muhomorr2
committed
fix handling of MATCH_ARCHIVED_PACKAGES flag in getPackageUidInternal()

muhomorr
authored and
muhomorr2
committed
delay activation of the Allow button in USB ADB confirmation dialog

muhomorr
authored and
muhomorr2
committed
FusedLocation: remove racy and redundant lazy init in Service.onBind()

muhomorr
authored and
muhomorr2
committed
never remove location providers at runtime

muhomorr
authored and
muhomorr2
committed
disable safe media volume management

muhomorr
authored and
muhomorr2
committed
add battery charge limit setting

muhomorr
authored and
muhomorr2
committed
SystemUI: add support for battery charge limit feature

muhomorr
authored and
muhomorr2
committed
add dev option to log Java binder transaction

muhomorr
authored and
muhomorr2
committed

Commits on Jun 29, 2025

prevent recycling user IDs
u-fred
committed
add LockDomain
u-fred
committed
add second factor to DevicePolicyManagerService
u-fred
committed
add second factor to LockSettingsService
u-fred
committed
add second factor to LockSettingsStateListener
u-fred
committed
add second factor to AdaptiveAuthService
u-fred
committed
add second factor to TrustManagerService
u-fred
committed
add biometric keyguard settings to LPU
u-fred
committed
improve upstream LPU#isCredentialSharableWithParent
u-fred
committed
add second factor to LockPattern classes
u-fred
committed
add BiometricAuthTokenStore
u-fred
committed
add second factor to FingerprintService
u-fred
committed
add second factor UI
u-fred
committed
throw Exception to notify of SceneContainerFlag
u-fred
committed
prevent face auth in KUM
u-fred
committed
fix upstream fingerprint mode change bug
u-fred
committed
append "Safe" to risky upstream method names
u-fred
committed
add second factor to fingerprint unlock
u-fred
committed
fix feature check in DPMS.getPasswordMinimumMetricsUnchecked()

muhomorr
authored and
u-fred
committed
fix collision check in SyntheticPasswordManager.generateProtectorId()

muhomorr
authored and
u-fred
committed
SystemUI: don't skip fingerprint auth success haptic when 2FA is on

muhomorr
authored and
u-fred
committed
add workaround for SSM.newTargetUser() system_server crash

muhomorr
authored and
u-fred
committed
don't break boot of debug OS build on permission allowlist violations

muhomorr
authored and
u-fred
committed
opt-out TunerSettings from edge-to-edge

thestinger
authored and
u-fred
committed
protect against upstream bugs bypassing 2FA

thestinger
authored and
u-fred
committed
fix serious upstream lockscreen animation bug

thestinger
authored and
u-fred
committed
zygote: don't reload android.os.Build after applying appcompat sysprops

muhomorr
authored and
u-fred
committed
enable appcompat sysprop overrides for user-installed apps

muhomorr
authored and
u-fred
committed
don't delay setting observer callbacks for background system packages

muhomorr
authored and
u-fred
committed
add network location setting

soupslurpr
authored and
u-fred
committed
add network location provider to config_locationProviderPackageNames

soupslurpr
authored and
u-fred
committed
FusedLocation: don't attempt to flush inactive providers

muhomorr
authored and
u-fred
committed
exclude Network Location from location indicator

thestinger
authored and
u-fred
committed
disable HttpEngine preloading for exec spawning

muhomorr
authored and
u-fred
committed
SystemUI: make screenshot sound use sound effects setting

muhomorr
authored and
u-fred
committed
SystemUI: Fix constraints for keyguard slice view

luk1337
authored and
u-fred
committed
SystemUI: Don't remove keyguard slice view

luk1337
authored and
u-fred
committed
SystemUI: Fix burn-in translations not applying to keyguard slices

AndyCGYan
authored and
u-fred
committed
config: enable desktop mode support

muhomorr
authored and
u-fred
committed
SystemUI: fix keyguard media section placement when split shade is used

muhomorr
authored and
u-fred
committed
SystemUI: fix orientation of keyguard slice view rows

muhomorr
authored and
u-fred
committed
SystemUI: don't hide date text on lockscreen when media is playing

muhomorr
authored and
u-fred
committed
SystemUI: add keyguard slice view to split shade layout

muhomorr
authored and
u-fred
committed
SystemUI: fix a screenshot process crash in ScrollCaptureController

muhomorr
authored and
u-fred
committed
don't allow to install APEXes on user builds

muhomorr
authored and
u-fred
committed
fix NPE system_server crash in F2fsUtils.getFilesRecursive()

muhomorr
authored and
u-fred
committed
don't allow enabling the instant apps feature

muhomorr
authored and
u-fred
committed
don't allow enabling the "add users when locked" setting

muhomorr
authored and
u-fred
committed
fix upstream RecoverySystem.verifyPackage vulnerability

thestinger
authored and
u-fred
committed
Section for adding non-runtime permissions downstream

quh4gko8
authored and
u-fred
committed
Add permission definition to read additional security state

quh4gko8
authored and
u-fred
committed
Extend getting security state bundle to include downstream configurations

quh4gko8
authored and
u-fred
committed
Method to fetch if a user can have a specific profile type

quh4gko8
authored and
u-fred
committed
Set secondary secondary users allow having private profiles

quh4gko8
authored and
u-fred
committed
Support adding private profiles when parent user can have private profiles

quh4gko8
authored and
u-fred
committed
Settings definition for cross profile clipboard access

quh4gko8
authored and
u-fred
committed
Enforce cross profile clipboard access settings

quh4gko8
authored and
u-fred
committed
bugfix: correctly find private profile in main user

quh4gko8
authored and
u-fred
committed
AppCopyHelper: store Context argument as a field

quh4gko8
authored and
u-fred
committed
AppCopyHelper: Extend SelectableAppInfo fields with info stored from ApplicationInfo

quh4gko8
authored and
u-fred
committed
NFC auto turn off

authored and
u-fred
committed
Definition of setting to disallow delayed locking on user stop or lock

quh4gko8
authored and
u-fred
committed
Enforce setting to disallow delayed locking for user when stopped/locked

quh4gko8
authored and
u-fred
committed
Always cache users that delay storage locking

quh4gko8
authored and
u-fred
committed
Lock cached profiles that delay locking of storage when parent user is stopped

quh4gko8
authored and
u-fred
committed
bugfix: appropriately set quiet mode when being enabled/disabled

quh4gko8
authored and
u-fred
committed
Set quiet mode and stop certain profiles when its parent user is starting or stopping

quh4gko8
authored and
u-fred
committed
Definition of AppInfoExt flag for apps signed using Play signing

quh4gko8
authored and
u-fred
committed
Append AppInfoExt flag for apps signed with Play signing

quh4gko8
authored and
u-fred
committed
PackageExt: Method to check for presence of an AppInfoExt flag

quh4gko8
authored and
u-fred
committed
Hide provider(s) for startup on apps with valid Play Store source stamp

quh4gko8
authored and
u-fred
committed
16: definition for Google Battery interface

quh4gko8
authored and
u-fred
committed
fix DevicePolicyManager#logoutUser to succeed without device admin

quh4gko8
authored and
u-fred
committed
allow SystemUITests to read SystemUI-readable settings on debug builds

inthewaves
authored and
u-fred
committed
allow system apps to opt-out of edge-to-edge enforcement

muhomorr2
authored and
u-fred
committed
_fixup! add GNSS SUPL setting

muhomorr2
authored and
u-fred
committed
_fixup! allow SystemUITests to read SystemUI-readable settings on debug builds

muhomorr2
authored and
u-fred
committed
gmscompat: fix a rare system_server NPE crash

muhomorr2
authored and
u-fred
committed
Reapply "temp: unconditionally enable system crash notifications"

muhomorr2
authored and
u-fred
committed
add 16 porting notes

muhomorr2
authored and
u-fred
committed
Revert "add UsbManager API for configuring USB port security state"

muhomorr2
authored and
u-fred
committed
UsbPortSecurityHooks: adjust to port security API changes

muhomorr2
authored and
u-fred
committed
don't enable port security restrictions by default on debug builds

muhomorr2
authored and
u-fred
committed
[bugfix] fixup! add second factor UI

inthewaves
authored and
u-fred
committed

Commits on Jun 30, 2025

Commits on Jul 3, 2025

Commits on Jul 4, 2025

fix Keyguard slice

u-fred
authored and
thestinger
committed
add lockscreen synchronisation failsafe

u-fred
authored and
thestinger
committed
fixup! add second factor to AdaptiveAuthService

u-fred
authored and
thestinger
committed

Commits on Jul 6, 2025

backport back button fix from 16 QPR1 Beta 2.1

muhomorr
authored and
thestinger
committed

Commits on Jul 7, 2025

Commits on Jul 8, 2025

Commits on Jul 10, 2025

SystemUI: clear keyguard indication background and icon on empty text

inthewaves
authored and
thestinger
committed
fixup! add second factor UI

inthewaves
authored and
thestinger
committed
fixup! add second factor to fingerprint unlock

inthewaves
authored and
thestinger
committed
fixup! append "Safe" to risky upstream method names

inthewaves
authored and
thestinger
committed
fixup! config: enable desktop mode support

muhomorr
authored and
thestinger
committed

Commits on Jul 12, 2025

fixup! SystemUI: add support for battery charge limit feature

muhomorr
authored and
thestinger
committed
Revert "Add a config to state whether a device supports increased touch sensitivity. (#2)"

muhomorr
authored and
thestinger
committed

Commits on Jul 20, 2025

use shared bitmaps in MediaMetadata to avoid Binder failures

muhomorr
authored and
thestinger
committed

Commits on Jul 27, 2025

Revert "gmscompat: drop old phenotype flag overrides before applying new ones"

inthewaves
authored and
thestinger
committed
add workaround for upstream async dexopt bug

muhomorr
authored and
thestinger
committed
add ConnectivityUtil

u-fred
authored and
thestinger
committed

Commits on Jul 28, 2025

add missing multi-user handling to ConnectivityUtil.isSystem()

muhomorr
authored and
thestinger
committed

Commits on Jul 30, 2025

remove dev option to switch to a pseudo-locale

muhomorr
authored and
thestinger
committed
fixup! add workaround for upstream async dexopt bug

muhomorr
authored and
thestinger
committed
[temporary] make AOSP dialer call notifications not groupable

inthewaves
authored and
thestinger
committed

Commits on Aug 4, 2025

add Geocoder setting

soupslurpr
authored and
thestinger
committed
require android.permission.INTERNET to use geocoder

soupslurpr
authored and
thestinger
committed
Defer remove splash screen while device is locked

wilsonshih
authored and
thestinger
committed

Commits on Aug 9, 2025

reduce time update threshold from 2000ms to 50ms
thestinger
committed

Commits on Aug 11, 2025

limit MediaMetadata object size to avoid Binder failures

muhomorr
authored and
thestinger
committed

Commits on Aug 14, 2025

Revert "limit MediaMetadata object size to avoid Binder failures"
thestinger
committed

Commits on Aug 27, 2025