create system app build variants

Author: Uldiniad

.gitignore

@@ -17,3 +17,12 @@
 .cxx
 local.properties
 app/src/headless/assets
+/.knownPackages
+/*.patch
+/build-tools
+/emulator
+/licenses
+/patcher
+/platform-tools
+/platforms
+/tools

Android.bp

@@ -0,0 +1,15 @@
+prebuilt_etc {
+    name: "privapp_whitelist_com.celzero.bravedns",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.celzero.bravedns.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.celzero.bravedns_whitelist",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "com.celzero.bravedns_whitelist.xml",
+    filename_from_src: true,
+}

Android.mk

@@ -0,0 +1,18 @@
+LOCAL_PATH := $(call my-dir)
+
+include $(CLEAR_VARS)
+
+LOCAL_MODULE := Rethink
+
+ifeq ($(TARGET_BUILD_VARIANT), userdebug)
+    LOCAL_SRC_FILES := app/build/outputs/apk/fdroidHeadless/debug/app-fdroid-headless-debug.apk
+else
+    LOCAL_SRC_FILES := app/build/outputs/apk/fdroidHeadless/release/app-fdroid-headless-release.apk
+endif
+LOCAL_CERTIFICATE := testkey
+LOCAL_PRODUCT_MODULE := true
+LOCAL_PRIVILEGED_MODULE := true
+LOCAL_MODULE_CLASS := APPS
+LOCAL_DEX_PREOPT := false
+LOCAL_REQUIRED_MODULES := privapp_whitelist_com.celzero.bravedns com.celzero.bravedns_whitelist
+include $(BUILD_PREBUILT)

app/src/main/AndroidManifest.xml

@@ -12,7 +12,6 @@
     <!-- Allows applications to change network connectivity state -->
     <uses-permission android:name="android.permission.CHANGE_NETWORK_STATE" />
     <uses-permission android:name="android.permission.INTERNET" />
-    <uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED" />
     <!-- Android 11 introduces changes related to package visibility. These changes affect
     apps only if they target Android 11.
     https://developer.android.com/training/package-visibility -->
@@ -22,7 +21,6 @@
     <!-- Allows the app to perform actions across different users on the device. -->
     <uses-permission
         android:name="android.permission.INTERACT_ACROSS_USERS"
-        android:protectionLevel="signature"
         tools:ignore="ProtectedPermissions" />
 
     <!-- https://github.com/celzero/rethink-app/issues/786 set memtagMode to off -->

com.celzero.bravedns.xml

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<permissions>
+    <privapp-permissions package="com.celzero.bravedns">
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+    </privapp-permissions>
+</permissions>

com.celzero.bravedns_whitelist.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+<config>
+    <allow-in-power-save package="com.celzero.bravedns" />
+    <install-in-user-type package="com.celzero.bravedns">
+        <install-in user-type="SYSTEM" />
+    </install-in-user-type>
+</config>

vendorsetup.sh

@@ -0,0 +1,4 @@
+SCRIPT_DIR=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
+yes | prebuilts/cmdline-tools/tools/bin/sdkmanager --licenses --sdk_root="$SCRIPT_DIR"
+TASK="assembleFdroidHeadless"
+ANDROID_HOME="$SCRIPT_DIR" JAVA_HOME=prebuilts/jdk/jdk17/linux-x86 "$SCRIPT_DIR"/gradlew -p "$SCRIPT_DIR" "$TASK"