Merge "Package the rust_nonsecure keymint default HAL in an APEX" into main

        "libkmr_wire",

    ],

    srcs: ["ta/lib.rs"],

}

apex {

    name: "com.android.hardware.keymint.rust_nonsecure",

    manifest: "manifest.json",

    file_contexts: "file_contexts",

    key: "com.google.cf.apex.key",

    certificate: ":com.android.hardware.certificate",

    soc_specific: true,

    updatable: false,

    binaries: [

        "android.hardware.security.keymint-service.nonsecure",

    ],

    prebuilts: [

        "keymint_aidl_nonsecure_init_rc",

        "keymint_aidl_nonsecure_vintf",

        "android.hardware.hardware_keystore.xml", // permissions

    ],

}

prebuilt_etc {

    name: "keymint_aidl_nonsecure_init_rc",

    filename_from_src: true,

    vendor: true,

    src: ":gen-keymint_aidl_nonsecure_init_rc",

}

genrule {

    name: "gen-keymint_aidl_nonsecure_init_rc",

    srcs: ["android.hardware.security.keymint-service.nonsecure.rc"],

    out: ["android.hardware.security.keymint-service.nonsecure.apex.rc"],

    cmd: "sed -E 's%/vendor/bin/%/apex/com.android.hardware.keymint/bin/%' $(in) > $(out)",

}

prebuilt_etc {

    name: "keymint_aidl_nonsecure_vintf",

    sub_dir: "vintf",

    vendor: true,

    srcs: [

        "android.hardware.security.keymint-service.xml",

        "android.hardware.security.sharedsecret-service.xml",

        "android.hardware.security.secureclock-service.xml",

    ],

}

(/.*)?                                                           u:object_r:vendor_file:s0

/etc(/.*)?                                                       u:object_r:vendor_configs_file:s0

/bin/hw/android\.hardware\.security\.keymint-service\.nonsecure  u:object_r:hal_keymint_rust_exec:s0

{

    "name": "com.android.hardware.keymint",

    "version": 1,

    "vendorBootstrap": true

}