Add `keystore.module_hash.sent` system prop
Re-use the property context `keystore_crash_prop` for this new prop
(after re-naming the context to `keystore_write_prop`).
Init.rc will wait for `keymint.module_hash.sent` to be set to true
before running `perform_apex_config` in order to prevent updateable APEX
modules from interfering in module measurement.
Bug: 369375199
Test: Manual (boots)
Change-Id: I6b9f9e907a151fe5cdd70b041c5a793998bc4f2e
diff --git a/private/keystore.te b/private/keystore.te
index 014903e..41c29db 100644
--- a/private/keystore.te
+++ b/private/keystore.te
@@ -39,7 +39,7 @@
# can call keystore methods on those references.
allow keystore vold:binder transfer;
-set_prop(keystore, keystore_crash_prop)
+set_prop(keystore, keystore_diagnostics_prop)
# Allow keystore to monitor the `apexd.status` property.
get_prop(keystore, apexd_prop)
@@ -102,6 +102,6 @@
neverallow * keystore:process ptrace;
-# Only keystore can set keystore.crash_count system property. Since init is allowed to set any
-# system property, an exception is added for init as well.
-neverallow { domain -keystore -init } keystore_crash_prop:property_service set;
+# Only keystore can set keystore_diagnostics_prop system properties. Since init is allowed to set
+# any system property, an exception is added for init as well.
+neverallow { domain -keystore -init } keystore_diagnostics_prop:property_service set;