commit 99f88846ffa799d341a8c65489aba25c864c450b
author Tri Vo <trong@google.com> Tue Jan 17 16:07:16 2023 -0800
committer Tri Vo <trong@google.com> Tue Jan 17 16:07:19 2023 -0800
tree 8de93f84571225687e708cd723267e2df38f1a30
parent 9a63dcb2ee410d521ead03761d5325258670b4ac

credstore: Add missing permissions

Bug: 261214100
Test: CtsIdentityTestCases
Change-Id: I6a70ed279f65d1cb4bfa0d53fa0e0f25d00d44b5

private/credstore.te

diff --git a/private/credstore.te b/private/credstore.te
index c410d76..2d9824b 100644
--- a/private/credstore.te
+++ b/private/credstore.te
@@ -10,3 +10,8 @@
 
 # credstore needs to get keys from the remotely provisioned pool
 allow credstore remotelyprovisionedkeypool_service:service_manager find;
+allow credstore keystore:keystore2 get_attestation_key;
+
+# credstore needs to get keys from the RKPD
+get_prop(credstore, device_config_remote_key_provisioning_native_prop)
+allow credstore remote_provisioning_service:service_manager find;