xref: /aosp_15_r20/system/sepolicy/prebuilts/api/202404/private/credstore.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1typeattribute credstore coredomain;
2
3init_daemon_domain(credstore)
4
5# talk to Identity Credential
6hal_client_domain(credstore, hal_identity)
7
8# talk to keymint, specifically for IRemotelyProvisionedComponent/default
9hal_client_domain(credstore, hal_keymint)
10
11# credstore needs to get keys from the RKPD
12get_prop(credstore, remote_prov_prop)
13allow credstore remote_provisioning_service:service_manager find;
14