Keystore 2.0: Add earlyBootEnded() to IKeystoreMaintenance
Introduce earlyBootEnded() to IKeystoreMaintenance - when called, this
method will inform all Keymint devices that early boot keys can no
longer be used. The early_boot_ended permission (in the keystore2 access
vector) is required to call this method.
Bug: 181821046
Bug: 181910578
Test: call IKeystoreMaintenance::earlyBootEnded() from vold
Change-Id: Ie1341626943c948bee002362ed7fc7f8f3abfc5b
diff --git a/keystore2/src/permission.rs b/keystore2/src/permission.rs
index f0a4c87..45c4dc1 100644
--- a/keystore2/src/permission.rs
+++ b/keystore2/src/permission.rs
@@ -311,6 +311,8 @@
ClearUID = 0x200, selinux name: clear_uid;
/// Checked when Credstore calls IKeystoreAuthorization to obtain auth tokens.
GetAuthToken = 0x400, selinux name: get_auth_token;
+ /// Checked when earlyBootEnded() is called.
+ EarlyBootEnded = 0x800, selinux name: early_boot_ended;
/// Checked when IKeystoreMaintenance::onDeviceOffBody is called.
ReportOffBody = 0x1000, selinux name: report_off_body;
}