2017-03-23 22:27:32 +01:00
|
|
|
typeattribute keystore coredomain;
|
|
|
|
|
|
2016-07-22 22:13:11 +02:00
|
|
|
init_daemon_domain(keystore)
|
2017-04-14 04:05:27 +02:00
|
|
|
|
|
|
|
|
# talk to keymaster
|
|
|
|
|
hal_client_domain(keystore, hal_keymaster)
|
|
|
|
|
|
2018-01-09 23:42:53 +01:00
|
|
|
# talk to confirmationui
|
|
|
|
|
hal_client_domain(keystore, hal_confirmationui)
|
|
|
|
|
|
2020-08-24 16:52:32 +02:00
|
|
|
# talk to keymint
|
|
|
|
|
hal_client_domain(keystore, hal_keymint)
|
|
|
|
|
|
2018-01-09 23:42:53 +01:00
|
|
|
# This is used for the ConfirmationUI async callback.
|
|
|
|
|
allow keystore platform_app:binder call;
|
|
|
|
|
|
2018-01-24 20:49:18 +01:00
|
|
|
# Allow to check whether security logging is enabled.
|
|
|
|
|
get_prop(keystore, device_logging_prop)
|
2020-07-25 22:02:29 +02:00
|
|
|
|
2020-06-11 01:34:41 +02:00
|
|
|
# Allow keystore to write to statsd.
|
|
|
|
|
unix_socket_send(keystore, statsdw, statsd)
|
2020-08-29 10:45:24 +02:00
|
|
|
|
2021-04-12 23:27:12 +02:00
|
|
|
# Allow keystore to register callbacks with statsd.
|
|
|
|
|
allow keystore stats_service:service_manager find;
|
|
|
|
|
binder_call(keystore, statsd);
|
|
|
|
|
|
2020-07-25 22:02:29 +02:00
|
|
|
# Keystore need access to the keystore_key context files to load the keystore key backend.
|
|
|
|
|
allow keystore keystore2_key_contexts_file:file r_file_perms;
|
2020-06-10 23:10:02 +02:00
|
|
|
|
2021-02-23 17:40:05 +01:00
|
|
|
get_prop(keystore, keystore_listen_prop)
|
2021-03-01 11:53:46 +01:00
|
|
|
|
2021-06-13 18:56:33 +02:00
|
|
|
# Keystore needs to transfer binder references to vold so that it
|
2021-03-01 11:53:46 +01:00
|
|
|
# can call keystore methods on those references.
|
|
|
|
|
allow keystore vold:binder transfer;
|
