定制framework 接口，并添加白名单

在framework中定制接口;
1.添加接口

└── xxx
  └── xxx
    └── xxx
        ├── xxx.java
        ├── xxx.java
        ├── xxx.java
        ├── xxx.java
        ├── xxx.java
        └── xxx.java

2.在package_allowed_list.txt中加入打包规则

build/soong/scripts/check_boot_jars/package_allowed_list.txt
+
+###################################################
+# framework.jar coustom java
+komect\.aisoho\.cloudcomputer
+komect\.aisoho\.cloudcomputer\..*
\ No newline at end of file

3.系统解决hidden api调用

Accessing hidden method Lxxx/xxx/xxx/xxx;->getBatteryStatus()I (blocked, linking, denied)

具体代码可以看这里： base/core/java/android/content/pm/ApplicationInfo.java

    private boolean isAllowedToUseHiddenApis() {
        if (isSignedWithPlatformKey()) {
            return true;
        } else if (isSystemApp() || isUpdatedSystemApp()) {
            return usesNonSdkApi() || isPackageWhitelistedForHiddenApis();
        } else {
            return false;
        }
    }

这个系统应用白名单所在位置frameworks/base/data/etc/hiddenapi-package-whitelist.xml

<?xml version="1.0" encoding="utf-8"?>
<config>
  <hidden-api-whitelisted-app package="android.ext.services" />
  <hidden-api-whitelisted-app package="com.android.apps.tag" />
  ..........

  <!-- TODO: Remove NetworkStack whitelisting -->
  <hidden-api-whitelisted-app package="com.android.networkstack" />
  <hidden-api-whitelisted-app package="cm.komect.aqb.android.ccsdk" />
  <hidden-api-whitelisted-app package="cm.komect.aqb.android.launcher" />
  <hidden-api-whitelisted-app package="cm.komect.aqb.android.hjqbind" />
  <hidden-api-whitelisted-app package="cm.komect.aqb.android.cloudcomputerpad" />
</config>

4.处理获取mac地址的问题

Index: packages/modules/Wifi/service/java/com/android/server/wifi/WifiServiceImpl.java
===================================================================
@@ -1168,8 +1168,11 @@
      */
     @Override
     public synchronized boolean setWifiEnabled(String packageName, boolean enable) {
-        if (enforceChangePermission(packageName) != MODE_ALLOWED) {
-            return false;
+        if (packageName !=null && packageName.contains("cm.komect.aqb")) {
+        }else{
+            if (enforceChangePermission(packageName) != MODE_ALLOWED) {
+                return false;
+            }
         }
         int callingUid = Binder.getCallingUid();
         int callingPid = Binder.getCallingPid();
@@ -5532,9 +5535,14 @@
     @Override
     public String[] getFactoryMacAddresses() {
         final int uid = Binder.getCallingUid();
-        if (!mWifiPermissionsUtil.checkNetworkSettingsPermission(uid)) {
-            throw new SecurityException("App not allowed to get Wi-Fi factory MAC address "
-                    + "(uid = " + uid + ")");
+        String packageName = getPackageNameByUid(uid);
+        if (packageName !=null &&  packageName.contains("cm.komect.aqb")) {
+            //杭研的包不做权限判断
+        }else{
+            if (!mWifiPermissionsUtil.checkNetworkSettingsPermission(uid)) {
+                throw new SecurityException("App not allowed to get Wi-Fi factory MAC address "
+                        + "(uid = " + uid + ")");
+            }
         }
         String result = mWifiThreadRunner.call(
                 () -> mActiveModeWarden.getPrimaryClientModeManager().getFactoryMacAddress(),
@@ -5548,6 +5556,14 @@
         return new String[]{result};
     }
 
+    private String getPackageNameByUid(int uid) {
+        String[] packageNames = mContext.getPackageManager().getPackagesForUid(uid);
+        if (packageNames != null && packageNames.length > 0) {
+            return packageNames[0]; // 返回找到的第一个包名
+        }
+        return null; // 如果没有找到包名，则返回null
+    }
+
     /**
      * Sets the current device mobility state.
      * @param state the new device mobility state

👀关注公众号：Android老皮！！！欢迎大家来找我探讨交流👀