xref: /aosp_15_r20/system/sepolicy/private/keystore2_key_contexts (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# Keystore 2.0 key contexts.
2*e4a36f41SAndroid Build Coastguard Worker# This file defines Keystore 2.0 namespaces and maps them to labels.
3*e4a36f41SAndroid Build Coastguard Worker# Format:
4*e4a36f41SAndroid Build Coastguard Worker# <namespace> <label>
5*e4a36f41SAndroid Build Coastguard Worker#
6*e4a36f41SAndroid Build Coastguard Worker# <namespace> must be an integer in the interval [0 ...  2^31)
7*e4a36f41SAndroid Build Coastguard Worker# su_key is a keystore2_key namespace for the su domain intended for native tests.
8*e4a36f41SAndroid Build Coastguard Worker0              u:object_r:su_key:s0
9*e4a36f41SAndroid Build Coastguard Worker
10*e4a36f41SAndroid Build Coastguard Worker# shell_key is a keystore2_key namespace for the shell domain intended for native tests.
11*e4a36f41SAndroid Build Coastguard Worker1              u:object_r:shell_key:s0
12*e4a36f41SAndroid Build Coastguard Worker
13*e4a36f41SAndroid Build Coastguard Worker# vold_key is a keystore2_key namespace for vold. It allows using raw Keymint blobs.
14*e4a36f41SAndroid Build Coastguard Worker100            u:object_r:vold_key:s0
15*e4a36f41SAndroid Build Coastguard Worker
16*e4a36f41SAndroid Build Coastguard Worker# odsign_key is a keystore2_key namespace for the on-device signing daemon.
17*e4a36f41SAndroid Build Coastguard Worker101            u:object_r:odsign_key:s0
18*e4a36f41SAndroid Build Coastguard Worker
19*e4a36f41SAndroid Build Coastguard Worker# wifi_key is a keystore2_key namespace for the WI-FI subsystem. It replaces the WIFI_UID
20*e4a36f41SAndroid Build Coastguard Worker# namespace in keystore.
21*e4a36f41SAndroid Build Coastguard Worker102            u:object_r:wifi_key:s0
22*e4a36f41SAndroid Build Coastguard Worker
23*e4a36f41SAndroid Build Coastguard Worker# locksettings_key is a keystore2_key namespace for the LockSettingsService.
24*e4a36f41SAndroid Build Coastguard Worker103            u:object_r:locksettings_key:s0
25*e4a36f41SAndroid Build Coastguard Worker
26*e4a36f41SAndroid Build Coastguard Worker# resume_on_reboot_key is a keystore2_key namespace intended for resume on reboot.
27*e4a36f41SAndroid Build Coastguard Worker120            u:object_r:resume_on_reboot_key:s0
28*e4a36f41SAndroid Build Coastguard Worker
29