Add a HAF access permission

This is signature protected, and extremely dangerous since it
grants system GID.

Change-Id: I2528813de9341187f18ef708e7251b4e5e4003a3

core/res/AndroidManifest.xml

@@ -2609,6 +2609,15 @@
         android:description="@string/permdesc_writeThemesDesc"
         android:protectionLevel="signature" />
 
+    <!-- Allows an application access the CM hardware abstraction framework (DANGEROUS)
+         <p>Not for use by third-party applications.
+         @hide -->
+    <permission android:name="android.permission.HARDWARE_ABSTRACTION_ACCESS"
+        android:label="@string/permlab_useHardwareFramework"
+        android:description="@string/permdesc_useHardwareFramework"
+        android:protectionLevel="signature" />
+
+
     <!-- The system process is explicitly the only one allowed to launch the
          confirmation UI for full backup/restore -->
     <uses-permission android:name="android.permission.CONFIRM_FULL_BACKUP"/>

core/res/res/values/cm_strings.xml

@@ -159,6 +159,11 @@
     <!-- Description of an application permission, listed so the user can choose whether they want to allow the application to do this. -->
     <string name="permdesc_setKeyguardWallpaper">Allows an app to change the lock screen wallpaper.</string>
 
+    <!-- Title of an application permission, listed so the user can choose whether they want the application to do this. -->
+    <string name="permlab_useHardwareFramework">use hardware framework</string>
+    <!-- Description of an application permission, listed so the user can choose whether they want to allow the application to do this. -->
+    <string name="permdesc_useHardwareFramework">Allows an app access to the CM hardware framework.</string>
+
     <string name="immersive_mode_confirmation_bottom">Swipe up from the bottom to exit full screen.</string>
 
     <!-- App ops requests -->

data/etc/platform.xml

@@ -117,6 +117,10 @@
         <group gid="loop_radio" />
     </permission>
 
+    <permission name="android.permission.HARDWARE_ABSTRACTION_ACCESS" >
+        <group gid="system" />
+    </permission>
+
     <!-- ================================================================== -->
     <!-- ================================================================== -->
     <!-- ================================================================== -->