platform_system_sepolicy/private/remote_prov_app.te
Seth Moore 8bfdd82123 Allow the remote provisioner app to set rkp_only properties
The properties for rkp_only are no longer read only.

This allows remote provisioner unit tests to enable/disable the remote
provisioning only mode, which is required to fully verify functionality.

Test: RemoteProvisionerUnitTests
Bug: 227306369
Change-Id: I8006712a49c4d0605f6268068414b49714bbd939
2022-04-20 17:15:20 -07:00

14 lines
421 B
Text

type remote_prov_app, domain;
typeattribute remote_prov_app coredomain;
app_domain(remote_prov_app)
net_domain(remote_prov_app)
set_prop(remote_prov_app, remote_prov_prop)
# The app needs access to properly build a DeviceInfo package for the verifying server
get_prop(remote_prov_app, vendor_security_patch_level_prop)
allow remote_prov_app {
app_api_service
remoteprovisioning_service
}:service_manager find;