Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 580ae4e9 authored by A. Cody Schuffelen's avatar A. Cody Schuffelen
Browse files

Use platform security domains in keymint/gatekeeper sepolicy 

... rather than Cuttlefish sepolicy.

Issue reported by rkir@.

Bug: b/374158137
Test: cvd create
Change-Id: I7522187100e4c8ec94aade5f3cb791087900f7e0
parent 8b569117

gatekeeper/aidl/software/file_contexts

+1 −1
Original line number Diff line number Diff line 
(/.*)?                                                          u:object_r:vendor_file:s0

/etc(/.*)?                                                      u:object_r:vendor_configs_file:s0

/bin/hw/android\.hardware\.gatekeeper-service\.nonsecure        u:object_r:hal_gatekeeper_remote_exec:s0
 
/bin/hw/android\.hardware\.gatekeeper-service\.nonsecure        u:object_r:hal_gatekeeper_default_exec:s0

security/keymint/aidl/default/file_contexts

+1 −1
Original line number Diff line number Diff line 
(/.*)?                                                           u:object_r:vendor_file:s0

/etc(/.*)?                                                       u:object_r:vendor_configs_file:s0

/bin/hw/android\.hardware\.security\.keymint-service\.nonsecure  u:object_r:hal_keymint_rust_exec:s0
 
/bin/hw/android\.hardware\.security\.keymint-service\.nonsecure  u:object_r:hal_keymint_default_exec:s0