platform_system_security/diced/diced.microdroid.rc
Jiyong Park a4c669c409 Add diced.microdroid
diced.microdroid is diced built for microdroid. The only difference is
that it's built with `bootstrap: true` so that it can start early when
APEXes are not activated.

Previously, diced was started after APEXes are activated. However, it
actually has to be started before because microdroid_manager depends on
diced to get the per-VM secret that it uses to decrypt the instance disk
where the list of APEXes to be activated is stored.

Bug: 214231981
Test: run microdroid
Change-Id: I74767667b0fa3a5c83c3b62f591b7f5a862791f7
2022-01-21 12:50:12 +09:00

13 lines
419 B
Text

# Start the Diced service.
#
# See system/core/init/README.md for information on the init.rc language.
service diced /system/bin/diced.microdroid
class main
user diced
group diced
# The diced service must not be allowed to restart.
# If it crashes for any reason security critical state is lost.
# The only remedy is to restart the device.
oneshot
writepid /dev/cpuset/foreground/tasks