android_system_sepolicy/private/keystore.te
Pavel Grafov c5b3330c30 Allow Keystore to check security logging property.
This is needed to allow it to log audit events.

Test: manual, import a key and see adb shell su system logcat -b security
Bug: 70886042
Change-Id: Icd3c13172d47f8eac7c2a97c306d8c654e634f88
2018-01-24 19:49:18 +00:00

20 lines
547 B
Plaintext

typeattribute keystore coredomain;
init_daemon_domain(keystore)
# talk to keymaster
hal_client_domain(keystore, hal_keymaster)
# talk to confirmationui
hal_client_domain(keystore, hal_confirmationui)
# This is used for the ConfirmationUI async callback.
allow keystore platform_app:binder call;
# Offer the Wifi Keystore HwBinder service
typeattribute keystore wifi_keystore_service_server;
add_hwservice(keystore, system_wifi_keystore_hwservice)
# Allow to check whether security logging is enabled.
get_prop(keystore, device_logging_prop)