commit 4bbfaa6a2da5930fb8e4797852d42aa071cecf8d
author Andrew Scull <ascull@google.com> Tue Feb 01 13:23:20 2022 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue Feb 01 13:23:20 2022 +0000
tree 0abcc0bdc07c76af60eaf1c1684bc95e67b99713
parent 108fdbc5f74e8616f3dce780ad526485c2bbb227
parent 248e8a998fb99e54bf3aef0d9eb1fa7f4bb8b5ac

Merge "Allow the microdroid app to use diced"

microdroid/system/private/microdroid_app.te

diff --git a/microdroid/system/private/microdroid_app.te b/microdroid/system/private/microdroid_app.te
index b71ae8d..de58326 100644
--- a/microdroid/system/private/microdroid_app.te
+++ b/microdroid/system/private/microdroid_app.te
@@ -11,3 +11,7 @@
 
 # Talk to binder services (for diced)
 binder_use(microdroid_app);
+
+allow microdroid_app dice_node_service:service_manager find;
+binder_call(microdroid_app, diced);
+allow microdroid_app diced:diced { get_attestation_chain derive };