commit 12de184d37aa5770a56a3110e1e4c1b5e8502cf4
author Alan Stokes <alanstokes@google.com> Thu Jun 08 11:24:56 2023 +0100
committer Alan Stokes <alanstokes@google.com> Thu Jun 08 11:24:56 2023 +0100
tree 2b22ccb63fd4818e2f6958ebd1fc691815d2dfd9
parent 394de71b25cec7bd5641b066b9f9a76c08447869

Switch rkpd to levelFrom=all

Defense in depth: ensure no other app can access rkpd data files.

Test: Presubmits.
Change-Id: Id3ca9829eadf19fb50da8d0a7414706121871633

private/seapp_contexts

diff --git a/private/seapp_contexts b/private/seapp_contexts
index 4454bd7..abd6c7b 100644
--- a/private/seapp_contexts
+++ b/private/seapp_contexts
@@ -183,8 +183,8 @@
 user=_app isPrivApp=true name=com.google.android.providers.media.module:* domain=mediaprovider_app type=privapp_data_file levelFrom=all
 user=_app seinfo=platform isPrivApp=true name=com.android.permissioncontroller domain=permissioncontroller_app type=privapp_data_file levelFrom=all
 user=_app isPrivApp=true name=com.android.vzwomatrigger domain=vzwomatrigger_app type=privapp_data_file levelFrom=all
-user=_app isPrivApp=true name=com.android.rkpdapp domain=rkpdapp type=privapp_data_file levelFrom=user
-user=_app isPrivApp=true name=com.google.android.rkpdapp domain=rkpdapp type=privapp_data_file levelFrom=user
+user=_app isPrivApp=true name=com.android.rkpdapp domain=rkpdapp type=privapp_data_file levelFrom=all
+user=_app isPrivApp=true name=com.google.android.rkpdapp domain=rkpdapp type=privapp_data_file levelFrom=all
 user=_app isPrivApp=true name=com.google.android.gms domain=gmscore_app type=privapp_data_file levelFrom=user
 user=_app isPrivApp=true name=com.google.android.gms.* domain=gmscore_app type=privapp_data_file levelFrom=user
 user=_app isPrivApp=true name=com.google.android.gms:* domain=gmscore_app type=privapp_data_file levelFrom=user