11diff --git a/shared/device.mk b/shared/device.mk
2- index 6cebe8ac9..a92183296 100644
2+ index c86840539..e61e5276b 100644
33--- a/shared/device.mk
44+++ b/shared/device.mk
5- @@ -530 ,6 +530,11 @@ endif
5+ @@ -558 ,6 +558,9 @@ endif
66 PRODUCT_PACKAGES += \
77 $(LOCAL_KEYMINT_PRODUCT_PACKAGE)
88
99+ PRODUCT_PACKAGES += \
1010+ android.hardware.security.keymint-service.strongbox \
11- +
12- +
1311+
1412 # Keymint configuration
13+ ifneq ($(LOCAL_PREFER_VENDOR_APEX),true)
1514 PRODUCT_COPY_FILES += \
16- frameworks/native/data/etc/android.software.device_id_attestation.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.software.device_id_attestation.xml
17- @@ -631,6 +636,7 @@ PRODUCT_PACKAGES += setup_wifi
18- PRODUCT_VENDOR_PROPERTIES += ro.vendor.wifi_impl=virt_wifi
19- endif
20-
21- +
22- # Host packages to install
23- PRODUCT_HOST_PACKAGES += socket_vsock_proxy
24-
2515diff --git a/shared/sepolicy/vendor/file_contexts b/shared/sepolicy/vendor/file_contexts
26- index 72362dc1f..62e3ef768 100644
16+ index cebac258e..42d3ad6f9 100644
2717--- a/shared/sepolicy/vendor/file_contexts
2818+++ b/shared/sepolicy/vendor/file_contexts
29- @@ -89 ,6 +89 ,7 @@
19+ @@ -93 ,6 +93 ,7 @@
3020 /vendor/bin/hw/android\.hardware\.input\.classifier@1\.0-service.default u:object_r:hal_input_classifier_default_exec:s0
3121 /vendor/bin/hw/android\.hardware\.thermal@2\.0-service\.mock u:object_r:hal_thermal_default_exec:s0
3222 /vendor/bin/hw/android\.hardware\.security\.keymint-service\.remote u:object_r:hal_keymint_remote_exec:s0
3323+ /vendor/bin/hw/android\.hardware\.security\.keymint-service\.strongbox u:object_r:hal_keymint_strongbox_exec:s0
3424 /vendor/bin/hw/android\.hardware\.keymaster@4\.1-service.remote u:object_r:hal_keymaster_remote_exec:s0
3525 /vendor/bin/hw/android\.hardware\.gatekeeper@1\.0-service.remote u:object_r:hal_gatekeeper_remote_exec:s0
36- /vendor/bin/hw/android\.hardware\.oemlock -service.example u:object_r:hal_oemlock_default_exec :s0
26+ /vendor/bin/hw/android\.hardware\.confirmationui@1\.0 -service.cuttlefish u:object_r:hal_confirmationui_cuttlefish_exec :s0
3727diff --git a/shared/sepolicy/vendor/hal_keymint_strongbox.te b/shared/sepolicy/vendor/hal_keymint_strongbox.te
3828new file mode 100644
3929index 000000000..839fd1a6b
@@ -55,16 +45,16 @@ index 000000000..839fd1a6b
5545+ allow hal_keymint_strongbox port:tcp_socket { name_connect };
5646+ allow hal_keymint_strongbox vendor_data_file:file { open read getattr };
5747diff --git a/shared/sepolicy/vendor/service_contexts b/shared/sepolicy/vendor/service_contexts
58- index d20d026cf..8531d9e55 100644
48+ index d20d026cf..b8f0155ab 100644
5949--- a/shared/sepolicy/vendor/service_contexts
6050+++ b/shared/sepolicy/vendor/service_contexts
61- @@ -4,6 +4,8 @@ android.hardware.neuralnetworks.IDevice/nnapi-sample_float_slow u:object_r:hal_n
51+ @@ -4,6 +4,9 @@ android.hardware.neuralnetworks.IDevice/nnapi-sample_float_slow u:object_r:hal_n
6252 android.hardware.neuralnetworks.IDevice/nnapi-sample_minimal u:object_r:hal_neuralnetworks_service:s0
6353 android.hardware.neuralnetworks.IDevice/nnapi-sample_quant u:object_r:hal_neuralnetworks_service:s0
6454 android.hardware.neuralnetworks.IDevice/nnapi-sample_sl_shim u:object_r:hal_neuralnetworks_service:s0
65- -
6655+ android.hardware.security.keymint.IKeyMintDevice/strongbox u:object_r:hal_keymint_service:s0
6756+ android.hardware.security.sharedsecret.ISharedSecret/strongbox u:object_r:hal_sharedsecret_service:s0
6857+ android.hardware.security.keymint.IRemotelyProvisionedComponent/strongbox u:object_r:hal_keymint_service:s0
58+
6959 # Binder service mappings
7060 gce u:object_r:gce_service:s0
0 commit comments