From cacab05892f33fb1a1f792294c63139a7c5ecd4e Mon Sep 17 00:00:00 2001
From: TheScarastic <warabhishek@e.email>
Date: Mon, 8 Aug 2022 08:22:03 +0000
Subject: [PATCH] Add privapp permission whitelist for production builds

---
 Android.bp                               | 8 ++++++++
 privapp_whitelist_im.angry.openeuicc.xml | 9 +++++++++
 2 files changed, 17 insertions(+)
 create mode 100644 privapp_whitelist_im.angry.openeuicc.xml

diff --git a/Android.bp b/Android.bp
index 331629f..3a77d03 100644
--- a/Android.bp
+++ b/Android.bp
@@ -28,9 +28,17 @@ android_app {
     resource_dirs: [
         "app/src/main/res",
     ],
+    required: ["privapp_whitelist_im.angry.openeuicc.xml"],
     manifest: "app/src/main/AndroidManifest.xml",
     privileged: true,
     platform_apis: true,
     system_ext_specific: true,
     certificate: "platform",
 }
+
+prebuilt_etc {
+    name: "privapp_whitelist_im.angry.openeuicc.xml",
+    system_ext_specific: true,
+    src: "privapp_whitelist_im.angry.openeuicc.xml",
+    sub_dir: "permissions",
+}
diff --git a/privapp_whitelist_im.angry.openeuicc.xml b/privapp_whitelist_im.angry.openeuicc.xml
new file mode 100644
index 0000000..88d35cc
--- /dev/null
+++ b/privapp_whitelist_im.angry.openeuicc.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="utf-8"?>
+<permissions>
+    <privapp-permissions package="im.angry.openeuicc">
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE" />
+        <permission name="android.permission.WRITE_EMBEDDED_SUBSCRIPTIONS" />
+        <permission name="android.permission.MODIFY_PHONE_STATE" />
+        <permission name="android.permission.SECURE_ELEMENT_PRIVILEGED_OPERATION" />
+    </privapp-permissions>
+</permissions>