aaacfdb054
These properties are used to inform keystore2 and the RemoteProvisioner app how they should behave in the system in the event that RKP keys are exhausted. The usual behavior in a hybrid system is not to take any action and fallback to the factory provisioned key if key attestation is requested and no remotely provisioned keys are available. However, there are instances where this could happen on a device that was intended to be RKP only, in which case the system needs to know that it should go ahead and attempt to remotely provision new certificates or throw an error in the case where none are available. Test: New properties are accessible from the two domains Change-Id: I8d6c9e650566499bf08cfda2f71c64d5c2b26fd6
14 lines
421 B
Text
14 lines
421 B
Text
type remote_prov_app, domain;
|
|
typeattribute remote_prov_app coredomain;
|
|
|
|
app_domain(remote_prov_app)
|
|
net_domain(remote_prov_app)
|
|
|
|
get_prop(remote_prov_app, remote_prov_prop)
|
|
# The app needs access to properly build a DeviceInfo package for the verifying server
|
|
get_prop(remote_prov_app, vendor_security_patch_level_prop)
|
|
|
|
allow remote_prov_app {
|
|
app_api_service
|
|
remoteprovisioning_service
|
|
}:service_manager find;
|