platform_system_sepolicy/private/keystore_keys.te
Tianjie 21ab75279a Give resume_on_reboot key as separate context
As part of the keystore2 requirement, we give the keys used for
resume on reboot a separate context in keystore. And grant system
server the permission to generate, use and delete it.

Bug: 172780686
Test: resume on reboot works after using keystore2
Change-Id: I6b47625a0864a4aa87b815c6d2009cc19ad151a0
2021-03-04 12:20:19 -08:00

19 lines
672 B
Text

# Specify keystore2_key namespaces in this file.
# Please keep the names in alphabetical order and comment each new entry.
# A keystore2_key namespace for the shell domain. Mainly used for native tests.
type shell_key, keystore2_key_type;
# A keystore2 namespace for the su domain. Mainly used for native tests.
type su_key, keystore2_key_type;
# A keystore2 namespace for vold. Vold need special permission to handle
# its own Keymint blobs.
type vold_key, keystore2_key_type;
# A keystore2 namespace for the on-device signing daemon.
type odsign_key, keystore2_key_type;
# A keystore2 namespace for resume on reboot.
type resume_on_reboot_key, keystore2_key_type;