Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 0277b66f authored by Seth Moore's avatar Seth Moore
Browse files

Add remote_provisioning system service 

This service is callable by system components like keystore2. This
service calls into a mainline module API to do all the work for remote
provisioning.

Also include new OWNERS for the RemoteProvisioning implementation.

Bug: 254112668
Test: Locally modify keystore to call the new service
Change-Id: I6708d0b415798c78a4d66f279589d9def552ae78
parent 8ff4152a

api/Android.bp

+1 −0
Original line number Diff line number Diff line
@@ -116,6 +116,7 @@ combined_apis { 
    system_server_classpath: [

        "service-media-s",

        "service-permission",

        "service-rkp",

        "service-sdksandbox",

    ],

}

core/java/Android.bp

+14 −0
Original line number Diff line number Diff line
@@ -376,6 +376,20 @@ aidl_interface { 
    },

}



// Build Rust bindings for remote provisioning. Needed by keystore2.

aidl_interface {

    name: "android.security.rkp_aidl",

    unstable: true,

    srcs: [

        "android/security/rkp/*.aidl",

    ],

    backend: {

        rust: {

            enabled: true,

        },

    },

}



aidl_interface {

    name: "android.debug_aidl",

    unstable: true,

core/java/android/content/Context.java

+8 −0
Original line number Diff line number Diff line
@@ -5906,6 +5906,14 @@ public abstract class Context { 
     */

    public static final String FILE_INTEGRITY_SERVICE = "file_integrity";



    /**

     * Binder service for remote key provisioning.

     *

     * @see android.frameworks.rkp.IRemoteProvisioning

     * @hide

     */

    public static final String REMOTE_PROVISIONING_SERVICE = "remote_provisioning";



    /**

     * Use with {@link #getSystemService(String)} to retrieve a

     * {@link android.hardware.lights.LightsManager} for controlling device lights.

core/java/android/security/rkp/IGetKeyCallback.aidl

0 → 100644
+49 −0
Original line number Diff line number Diff line 
/*

 * Copyright (C) 2022 The Android Open Source Project

 *

 * Licensed under the Apache License, Version 2.0 (the "License");

 * you may not use this file except in compliance with the License.

 * You may obtain a copy of the License at

 *

 *      http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

 */



package android.security.rkp;



import android.security.rkp.RemotelyProvisionedKey;



/**

 * Callback interface for receiving remotely provisioned keys from a

 * {@link IRegistration}.

 *

 * @hide

 */

oneway interface IGetKeyCallback {

    /**

     * Called in response to {@link IRegistration.getKey}, indicating

     * a remotely-provisioned key is available.

     *

     * @param key The key that was received from the remote provisioning service.

     */

    void onSuccess(in RemotelyProvisionedKey key);



    /**

     * Called when the key request has been successfully cancelled.

     * @see IRegistration.cancelGetKey

     */

    void onCancel();



    /**

     * Called when an error has occurred while trying to get a remotely provisioned key.

     *

     * @param error A description of what failed, suitable for logging.

     */

    void onError(String error);

}

core/java/android/security/rkp/IGetRegistrationCallback.aidl

0 → 100644
+49 −0
Original line number Diff line number Diff line 
/*

 * Copyright (C) 2022 The Android Open Source Project

 *

 * Licensed under the Apache License, Version 2.0 (the "License");

 * you may not use this file except in compliance with the License.

 * You may obtain a copy of the License at

 *

 *      http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

 */



package android.security.rkp;



import android.security.rkp.IRegistration;



/**

 * Callback interface for receiving a remote provisioning registration.

 * {@link IRegistration}.

 *

 * @hide

 */

oneway interface IGetRegistrationCallback {

    /**

     * Called in response to {@link IRemoteProvisioning.getRegistration}.

     *

     * @param registration an IRegistration that is used to fetch remotely

     * provisioned keys for the given IRemotelyProvisionedComponent.

     */

    void onSuccess(in IRegistration registration);



    /**

     * Called when the get registration request has been successfully cancelled.

     * @see IRemoteProvisioning.cancelGetRegistration

     */

    void onCancel();



    /**

     * Called when an error has occurred while trying to get a registration.

     *

     * @param error A description of what failed, suitable for logging.

     */

    void onError(String error);

}