| # service started when selecting `com.android.hardware.keymint.trusty_tee` vendor apex | |
| service vendor.keymint-service.trusty_tee \ | |
| /vendor/bin/hw/android.hardware.security.keymint-service.trusty_tee \ | |
| --dev ${ro.hardware.trusty_ipc_dev.keymint:-/dev/trusty-ipc-dev0} | |
| disabled | |
| class early_hal | |
| user nobody | |
| group drmrpc | |
| # The keymint service is not allowed to restart. | |
| # If it crashes, a device restart is required. | |
| oneshot |