Merge "Limit special file permissions to the keymint server domain"

This commit is contained in:
Seth Moore 2022-11-03 18:39:50 +00:00 committed by Gerrit Code Review
commit 2a7198811a

View file

@ -4,5 +4,5 @@ hal_attribute_service(hal_keymint, hal_keymint_service)
hal_attribute_service(hal_keymint, hal_remotelyprovisionedcomponent_service)
binder_call(hal_keymint_server, servicemanager)
allow hal_keymint tee_device:chr_file rw_file_perms;
allow hal_keymint ion_device:chr_file r_file_perms;
allow hal_keymint_server tee_device:chr_file rw_file_perms;
allow hal_keymint_server ion_device:chr_file r_file_perms;