Skip to content

Commit 8f4b081

Browse files
authored
Merge pull request #64 from subrahmanyaman/Javacard_KeyMint_100_master
Updated the device_google_cuttlefish.patch with latest sync
2 parents 5cc8d6c + bc5f358 commit 8f4b081

File tree

1 file changed

+9
-19
lines changed

1 file changed

+9
-19
lines changed
Lines changed: 9 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -1,39 +1,29 @@
11
diff --git a/shared/device.mk b/shared/device.mk
2-
index 6cebe8ac9..a92183296 100644
2+
index c86840539..e61e5276b 100644
33
--- a/shared/device.mk
44
+++ b/shared/device.mk
5-
@@ -530,6 +530,11 @@ endif
5+
@@ -558,6 +558,9 @@ endif
66
PRODUCT_PACKAGES += \
77
$(LOCAL_KEYMINT_PRODUCT_PACKAGE)
88

99
+PRODUCT_PACKAGES += \
1010
+ android.hardware.security.keymint-service.strongbox \
11-
+
12-
+
1311
+
1412
# Keymint configuration
13+
ifneq ($(LOCAL_PREFER_VENDOR_APEX),true)
1514
PRODUCT_COPY_FILES += \
16-
frameworks/native/data/etc/android.software.device_id_attestation.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.software.device_id_attestation.xml
17-
@@ -631,6 +636,7 @@ PRODUCT_PACKAGES += setup_wifi
18-
PRODUCT_VENDOR_PROPERTIES += ro.vendor.wifi_impl=virt_wifi
19-
endif
20-
21-
+
22-
# Host packages to install
23-
PRODUCT_HOST_PACKAGES += socket_vsock_proxy
24-
2515
diff --git a/shared/sepolicy/vendor/file_contexts b/shared/sepolicy/vendor/file_contexts
26-
index 72362dc1f..62e3ef768 100644
16+
index cebac258e..42d3ad6f9 100644
2717
--- a/shared/sepolicy/vendor/file_contexts
2818
+++ b/shared/sepolicy/vendor/file_contexts
29-
@@ -89,6 +89,7 @@
19+
@@ -93,6 +93,7 @@
3020
/vendor/bin/hw/android\.hardware\.input\.classifier@1\.0-service.default u:object_r:hal_input_classifier_default_exec:s0
3121
/vendor/bin/hw/android\.hardware\.thermal@2\.0-service\.mock u:object_r:hal_thermal_default_exec:s0
3222
/vendor/bin/hw/android\.hardware\.security\.keymint-service\.remote u:object_r:hal_keymint_remote_exec:s0
3323
+/vendor/bin/hw/android\.hardware\.security\.keymint-service\.strongbox u:object_r:hal_keymint_strongbox_exec:s0
3424
/vendor/bin/hw/android\.hardware\.keymaster@4\.1-service.remote u:object_r:hal_keymaster_remote_exec:s0
3525
/vendor/bin/hw/android\.hardware\.gatekeeper@1\.0-service.remote u:object_r:hal_gatekeeper_remote_exec:s0
36-
/vendor/bin/hw/android\.hardware\.oemlock-service.example u:object_r:hal_oemlock_default_exec:s0
26+
/vendor/bin/hw/android\.hardware\.confirmationui@1\.0-service.cuttlefish u:object_r:hal_confirmationui_cuttlefish_exec:s0
3727
diff --git a/shared/sepolicy/vendor/hal_keymint_strongbox.te b/shared/sepolicy/vendor/hal_keymint_strongbox.te
3828
new file mode 100644
3929
index 000000000..839fd1a6b
@@ -55,16 +45,16 @@ index 000000000..839fd1a6b
5545
+allow hal_keymint_strongbox port:tcp_socket { name_connect };
5646
+allow hal_keymint_strongbox vendor_data_file:file { open read getattr };
5747
diff --git a/shared/sepolicy/vendor/service_contexts b/shared/sepolicy/vendor/service_contexts
58-
index d20d026cf..8531d9e55 100644
48+
index d20d026cf..b8f0155ab 100644
5949
--- a/shared/sepolicy/vendor/service_contexts
6050
+++ b/shared/sepolicy/vendor/service_contexts
61-
@@ -4,6 +4,8 @@ android.hardware.neuralnetworks.IDevice/nnapi-sample_float_slow u:object_r:hal_n
51+
@@ -4,6 +4,9 @@ android.hardware.neuralnetworks.IDevice/nnapi-sample_float_slow u:object_r:hal_n
6252
android.hardware.neuralnetworks.IDevice/nnapi-sample_minimal u:object_r:hal_neuralnetworks_service:s0
6353
android.hardware.neuralnetworks.IDevice/nnapi-sample_quant u:object_r:hal_neuralnetworks_service:s0
6454
android.hardware.neuralnetworks.IDevice/nnapi-sample_sl_shim u:object_r:hal_neuralnetworks_service:s0
65-
-
6655
+android.hardware.security.keymint.IKeyMintDevice/strongbox u:object_r:hal_keymint_service:s0
6756
+android.hardware.security.sharedsecret.ISharedSecret/strongbox u:object_r:hal_sharedsecret_service:s0
6857
+android.hardware.security.keymint.IRemotelyProvisionedComponent/strongbox u:object_r:hal_keymint_service:s0
58+
6959
# Binder service mappings
7060
gce u:object_r:gce_service:s0

0 commit comments

Comments
 (0)