platform_system_sepolicy/private/hal_rebootescrow.te

# HwBinder IPC from client to server
binder_call(hal_rebootescrow_client, hal_rebootescrow_server)

hal_attribute_service(hal_rebootescrow, hal_rebootescrow_service)

binder_use(hal_rebootescrow_server)
Support Resume on Reboot When an OTA is downloaded, the RecoverySystem can be triggered to store the user's lock screen knowledge factor in a secure way using the IRebootEscrow HAL. This will allow the credential encrypted (CE) storage, keymaster credentials, and possibly others to be unlocked when the device reboots after an OTA. Bug: 63928581 Test: make Test: boot emulator with default implementation Test: boot Pixel 4 with default implementation Change-Id: I1f02e7a502478715fd642049da01eb0c01d112f6 2019-12-04 01:55:43 +01:00			`# HwBinder IPC from client to server`
			`binder_call(hal_rebootescrow_client, hal_rebootescrow_server)`

Make AIDL HAL client attribute an exclusive client. Like HIDL HALs, if we have a service which is allowed to access hal_<foo>_service, we want that service to have the attribute hal_<foo>_client. Unlike HIDL HALs, some AIDL services are allowed to get ahold of all HALs, so these have to be exempted from this check. Fixes: 168152053 Test: neverallows pass Change-Id: I4bce6d9441c2921c3ea40f2b01fef4030c02a28a 2020-09-11 00:57:51 +02:00			`hal_attribute_service(hal_rebootescrow, hal_rebootescrow_service)`
Support Resume on Reboot When an OTA is downloaded, the RecoverySystem can be triggered to store the user's lock screen knowledge factor in a secure way using the IRebootEscrow HAL. This will allow the credential encrypted (CE) storage, keymaster credentials, and possibly others to be unlocked when the device reboots after an OTA. Bug: 63928581 Test: make Test: boot emulator with default implementation Test: boot Pixel 4 with default implementation Change-Id: I1f02e7a502478715fd642049da01eb0c01d112f6 2019-12-04 01:55:43 +01:00
Make AIDL HAL client attribute an exclusive client. Like HIDL HALs, if we have a service which is allowed to access hal_<foo>_service, we want that service to have the attribute hal_<foo>_client. Unlike HIDL HALs, some AIDL services are allowed to get ahold of all HALs, so these have to be exempted from this check. Fixes: 168152053 Test: neverallows pass Change-Id: I4bce6d9441c2921c3ea40f2b01fef4030c02a28a 2020-09-11 00:57:51 +02:00			`binder_use(hal_rebootescrow_server)`