1<?xml version="1.0" encoding="utf-8"?>
2<!--
3/*
4 * Copyright (C) 2019 The Android Open Source Project
5 *
6 * Licensed under the Apache License, Version 2.0 (the "License");
7 * you may not use this file except in compliance with the License.
8 * You may obtain a copy of the License at
9 *
10 *      http://www.apache.org/licenses/LICENSE-2.0
11 *
12 * Unless required by applicable law or agreed to in writing, software
13 * distributed under the License is distributed on an "AS IS" BASIS,
14 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15 * See the License for the specific language governing permissions and
16 * limitations under the License.
17 */
18-->
19<manifest xmlns:android="http://schemas.android.com/apk/res/android"
20          package="com.android.networkstack.tethering"
21          android:sharedUserId="android.uid.networkstack">
22
23    <!-- Permissions must be defined here, and not in the base manifest, as the tethering
24         running in the system server process does not need any permission, and having
25         privileged permissions added would cause crashes on startup unless they are also
26         added to the privileged permissions allowlist for that package. EntitlementManager
27         would set exact alarm but declare SCHEDULE_EXACT_ALARM is not necessary here because
28         privilege application would be in the allowlist. -->
29    <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />
30    <uses-permission android:name="android.permission.BLUETOOTH" />
31    <uses-permission android:name="android.permission.BLUETOOTH_CONNECT" />
32    <uses-permission android:name="android.permission.BLUETOOTH_PRIVILEGED" />
33    <uses-permission android:name="android.permission.BROADCAST_STICKY" />
34    <uses-permission android:name="android.permission.CHANGE_NETWORK_STATE" />
35    <uses-permission android:name="android.permission.INTERACT_ACROSS_USERS"/>
36    <uses-permission android:name="android.permission.MANAGE_USB" />
37    <!-- MANAGE_USERS is for accessing multi-user APIs, note that QUERY_USERS should
38         not be used since it is not a privileged permission until U. -->
39    <uses-permission android:name="android.permission.MANAGE_USERS"/>
40    <uses-permission android:name="android.permission.MODIFY_PHONE_STATE" />
41    <uses-permission android:name="android.permission.READ_DEVICE_CONFIG" />
42    <uses-permission android:name="android.permission.READ_NETWORK_USAGE_HISTORY" />
43    <uses-permission android:name="android.permission.READ_PHONE_STATE"/>
44    <uses-permission android:name="android.permission.TETHER_PRIVILEGED" />
45    <uses-permission android:name="android.permission.UPDATE_APP_OPS_STATS" />
46    <uses-permission android:name="android.permission.UPDATE_DEVICE_STATS" />
47    <uses-permission android:name="android.permission.WRITE_SETTINGS" />
48    <uses-permission android:name="android.permission.POST_NOTIFICATIONS"/>
49
50    <!-- Sending non-protected broadcast from system uid is not allowed. -->
51    <protected-broadcast android:name="com.android.server.connectivity.tethering.DISABLE_TETHERING" />
52
53    <application
54        android:process="com.android.networkstack.process"
55        android:extractNativeLibs="false"
56        android:persistent="true">
57        <service android:name="com.android.networkstack.tethering.TetheringService"
58                 android:permission="android.permission.MAINLINE_NETWORK_STACK"
59                 android:exported="true">
60            <intent-filter>
61                <action android:name="android.net.ITetheringConnector"/>
62            </intent-filter>
63        </service>
64    </application>
65</manifest>
66