Signature|privileged permissions not in privapp-permissions allowlist

在开发的时候遇到了如下的一个报错

01-06 03:42:55.901 1355 1355 E AndroidRuntime: *** FATAL EXCEPTION IN SYSTEM PROCESS: main 01-06 03:42:55.901 1355 1355 E AndroidRuntime: java.lang.IllegalStateException: Signature|privileged permissions not in privapp-permissions allowlist: {com.examp.myservice (/system/system_ext/priv-app/MyService): android.permission.FORCE_STOP_PACKAGES} 01-06 03:42:55.901 1355 1355 E AndroidRuntime: at com.android.server.pm.permission.PermissionManagerService.systemReady(PermissionManagerService.java:4577) 01-06 03:42:55.901 1355 1355 E AndroidRuntime: at com.android.server.pm.permission.PermissionManagerService.access$800(PermissionManagerService.java:191) 01-06 03:42:55.901 1355 1355 E AndroidRuntime: at com.android.server.pm.permission.PermissionManagerService$PermissionManagerServiceInternalImpl.onSystemReady(PermissionManagerService.java:5051) 01-06 03:42:55.901 1355 1355 E AndroidRuntime: at com.android.server.pm.PackageManagerService.systemReady(PackageManagerService.java:24723) 01-06 03:42:55.901 1355 1355 E AndroidRuntime: at com.android.server.SystemServer.startOtherServices(SystemServer.java:2651) 01-06 03:42:55.901 1355 1355 E AndroidRuntime: at com.android.server.SystemServer.run(SystemServer.java:900) 01-06 03:42:55.901 1355 1355 E AndroidRuntime: at com.android.server.SystemServer.main(SystemServer.java:631) 01-06 03:42:55.901 1355 1355 E AndroidRuntime: at java.lang.reflect.Method.invoke(Native Method) 01-06 03:42:55.901 1355 1355 E AndroidRuntime: at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:548) 01-06 03:42:55.901 1355 1355 E AndroidRuntime: at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:981)

这个是因为privapp的应用在AndroidManifest.xml里面声明使用如下权限，

<uses-permission android:name="android.permission.FORCE_STOP_PACKAGES"/>

调用一些系统api的时候，一些权限要在系统权限白名单里面声明，如上报错就需要将android.permission.FORCE_STOP_PACKAGES权限声明在系统权限白名单里面。

创建白名单文件com.my.permission.ext.xml，并写入如下内容

<permissions>
    <privapp-permissions package="com.examp.myservice">
        <permission name="android.permission.FORCE_STOP_PACKAGES"/>
    </privapp-permissions>
</permissions>

package是app包名，

permission 是在AndroidManifest.xml里面声明的<uses-permission>

编写编译文件Android.bp

prebuilt_etc {
    name: "com.my.permission.ext.xml",
    system_ext_specific: true,
    sub_dir: "permissions",
    src: "com.my.permission.ext.xml",
    filename_from_src: true,
}

然后将工程加入到PRODUCT_PACKAGES中。

PRODUCT_PACKAGES += \
    com.my.permission.ext.xml \

然后重新make下工程就会在out目录中的/system/system_ext/etc/permission/目录中看到白名单文件com.my.permission.ext.xml，

注：我的工程是在/system/system_ext/priv-app/里面的工程，如果你的是在system/priv-app/里面的工程，那就在Android.bp里面去掉 system_ext_specific: true，你的白名单就会在/system/etc/permission/