commit d25c80a9511f842079be015c49eaa7358f24cd8c
author Vikram Gaur <vikramgaur@google.com> Wed Aug 31 00:08:16 2022 +0000
committer Vikram Gaur <vikramgaur@google.com> Fri Sep 23 05:09:00 2022 +0000
tree 82cddb770f16339f7f443443224da753501be34b
parent 5043c02262bdae99679fc5010a13aecbafc54f23

Add SELinux policy changes for rkpd

This is a part of changes to bring up Remote Key Provisioning Daemon
module. See packages/modules/RemoteKeyProvisioning for more info.

Change-Id: Iae4e98176491637acb03e2e09b9d8dbc269be616
Test: atest rkpd_client_test

apex/Android.bp

diff --git a/apex/Android.bp b/apex/Android.bp
index 8c9db86..994bfd2 100644
--- a/apex/Android.bp
+++ b/apex/Android.bp
@@ -272,3 +272,10 @@
     "com.android.healthconnect-file_contexts",
   ],
 }
+
+filegroup {
+  name: "com.android.rkpd-file_contexts",
+  srcs: [
+    "com.android.rkpd-file_contexts",
+  ],
+}

apex/com.android.rkpd-file_contexts

diff --git a/apex/com.android.rkpd-file_contexts b/apex/com.android.rkpd-file_contexts
new file mode 100644
index 0000000..4424c8a
--- /dev/null
+++ b/apex/com.android.rkpd-file_contexts
@@ -0,0 +1,2 @@
+(/.*)?              u:object_r:system_file:s0
+/bin/rkpd           u:object_r:rkpd_exec:s0