xref: /aosp_15_r20/system/sepolicy/private/credstore.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workertypeattribute credstore coredomain;
2*e4a36f41SAndroid Build Coastguard Worker
3*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(credstore)
4*e4a36f41SAndroid Build Coastguard Worker
5*e4a36f41SAndroid Build Coastguard Worker# talk to Identity Credential
6*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(credstore, hal_identity)
7*e4a36f41SAndroid Build Coastguard Worker
8*e4a36f41SAndroid Build Coastguard Worker# talk to keymint, specifically for IRemotelyProvisionedComponent/default
9*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(credstore, hal_keymint)
10*e4a36f41SAndroid Build Coastguard Worker
11*e4a36f41SAndroid Build Coastguard Worker# credstore needs to get keys from the RKPD
12*e4a36f41SAndroid Build Coastguard Workerget_prop(credstore, remote_prov_prop)
13*e4a36f41SAndroid Build Coastguard Workerallow credstore remote_provisioning_service:service_manager find;
14*e4a36f41SAndroid Build Coastguard Worker
15*e4a36f41SAndroid Build Coastguard Workerbinder_use(credstore)
16*e4a36f41SAndroid Build Coastguard Workerbinder_service(credstore)
17*e4a36f41SAndroid Build Coastguard Workerbinder_call(credstore, system_server)
18*e4a36f41SAndroid Build Coastguard Worker
19*e4a36f41SAndroid Build Coastguard Workerallow credstore credstore_data_file:dir create_dir_perms;
20*e4a36f41SAndroid Build Coastguard Workerallow credstore credstore_data_file:file create_file_perms;
21*e4a36f41SAndroid Build Coastguard Worker
22*e4a36f41SAndroid Build Coastguard Workeradd_service(credstore, credstore_service)
23*e4a36f41SAndroid Build Coastguard Workerallow credstore sec_key_att_app_id_provider_service:service_manager find;
24*e4a36f41SAndroid Build Coastguard Workerallow credstore dropbox_service:service_manager find;
25*e4a36f41SAndroid Build Coastguard Workerallow credstore authorization_service:service_manager find;
26*e4a36f41SAndroid Build Coastguard Workerallow credstore keystore:keystore2 get_auth_token;
27*e4a36f41SAndroid Build Coastguard Worker
28*e4a36f41SAndroid Build Coastguard Workerr_dir_file(credstore, cgroup)
29*e4a36f41SAndroid Build Coastguard Workerr_dir_file(credstore, cgroup_v2)
30