From fa69777f1a61ec7253e152bb2fdea3fdcbac2c91 Mon Sep 17 00:00:00 2001
From: oxmc <67136658+oxmc@users.noreply.github.com>
Date: Tue, 21 Jul 2026 17:45:06 -0700
Subject: [PATCH] microg: drop inert FAKE_PACKAGE_SIGNATURE allowlist for
 GsfProxy

GsfProxy neither requests the permission nor carries fake-signature
metadata, so the privapp-permissions entry did nothing. Spoofing stays
system-level (signature|privileged) via GmsCore and FakeStore only.
---
 config/permissions/privapp-permissions-microg.xml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/config/permissions/privapp-permissions-microg.xml b/config/permissions/privapp-permissions-microg.xml
index 177f7dd..40d89d9 100644
--- a/config/permissions/privapp-permissions-microg.xml
+++ b/config/permissions/privapp-permissions-microg.xml
@@ -42,9 +42,4 @@
         <permission name="android.permission.INSTALL_PACKAGES"/>
         <permission name="android.permission.INTERACT_ACROSS_USERS"/>
     </privapp-permissions>
-
-    <!-- MicroG GsfProxy (com.google.android.gsf) — privileged product app -->
-    <privapp-permissions package="com.google.android.gsf">
-        <permission name="android.permission.FAKE_PACKAGE_SIGNATURE"/>
-    </privapp-permissions>
 </permissions>