Audited GmsCore/AuroraStore/FakeStore's declared permissions against their
default-permissions grants (dangerous protection level confirmed against
frameworks/base's own AndroidManifest.xml, not guessed). AuroraStore and
FakeStore were already complete. GmsCore had two real gaps:
ACCESS_BACKGROUND_LOCATION was a literal unfilled template placeholder
(<!-- %ACCESS_BACKGROUND_LOCATION% -->), and BLUETOOTH_ADVERTISE/
BLUETOOTH_CONNECT/BLUETOOTH_SCAN (Android 12+ runtime permissions) were
declared by the app but never added to this older-style template at all.
Without these, location and Bluetooth features prompt the user on first
use instead of just working.
oxmc
5e72500f8e