Remove implementation details from permission hidden api flags

Ran the following to compute the set of split_packages and
package_prefixes properties.
    m analyze_bcpf && analyze_bcpf --bcpf com.android.permission-bootclasspath-fragment

Bug: 194063708
Test: m out/soong/hiddenapi/hiddenapi-flags.csv
Change-Id: I148891630da53d81ccdc6d3246a0b81e1e0fadc9

1 files changed, 24 insertions, 0 deletions

diff --git a/Android.bp b/Android.bp
index 8ec8b74fb..08e46e65d 100644
--- a/Android.bp
+++ b/Android.bp
@@ -83,6 +83,30 @@ bootclasspath_fragment {
     additional_stubs: [
         "android-non-updatable",
     ],
+
+    hidden_api: {
+        // The following packages contain classes from other modules on the
+        // bootclasspath. That means that the hidden API flags for this module
+        // has to explicitly list every single class this module provides in
+        // that package to differentiate them from the classes provided by other
+        // modules. That can include private classes that are not part of the
+        // API.
+        split_packages: [
+            "android.permission",
+        ],
+
+        // The following packages and all their subpackages currently only
+        // contain classes from this bootclasspath_fragment. Listing a package
+        // here won't prevent other bootclasspath modules from adding classes in
+        // any of those packages but it will prevent them from adding those
+        // classes into an API surface, e.g. public, system, etc.. Doing so will
+        // result in a build failure due to inconsistent flags.
+        package_prefixes: [
+            "android.app.role",
+            "android.safetycenter",
+            "com.android.permission",
+        ],
+    },
 }
 
 // Encapsulate the contributions made by the com.android.permission to the systemserverclasspath.