Android counterpart to git.oxmc.me/PawletOS/profiled's Linux daemon -- independent implementation, not a port. Same .vconfig profile format and 17 payload types, but implemented against DevicePolicyManager/VpnManager/ WifiManager/WallpaperManager/KeyChain instead of a native NDK Binder daemon, since that's where AOSP actually exposes this functionality. Self-provisions as device owner at first boot (DeviceOwnerProvisioner.kt) to unlock the DevicePolicyManager-gated payload types (cert, pkcs12, passcode, proxy, screensaver lock enforcement). 16 of 17 payload types are real implementations; firewall is a documented platform dead end (no app UID gets CAP_NET_ADMIN). See README's capability matrix for the full per-payload breakdown. Reviewed against the documented @SystemApi/hidden-API surface, not compiled -- no AOSP toolchain available in this environment.
16 lines
443 B
XML
16 lines
443 B
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<device-admin xmlns:android="http://schemas.android.com/apk/res/android"
|
|
android:visible="true">
|
|
<uses-policies>
|
|
<limit-password />
|
|
<watch-login />
|
|
<reset-password />
|
|
<force-lock />
|
|
<wipe-data />
|
|
<expire-password />
|
|
<encrypted-storage />
|
|
<disable-camera />
|
|
<disable-keyguard-features />
|
|
</uses-policies>
|
|
</device-admin>
|