| type remote_prov_app, domain; |
| typeattribute remote_prov_app coredomain; |
| |
| app_domain(remote_prov_app) |
| net_domain(remote_prov_app) |
| |
| set_prop(remote_prov_app, remote_prov_prop) |
| # The app needs access to properly build a DeviceInfo package for the verifying server |
| get_prop(remote_prov_app, vendor_security_patch_level_prop) |
| |
| # if rkpd is enabled, remote provisioner is a noop |
| get_prop(remote_prov_app, device_config_remote_key_provisioning_native_prop) |
| |
| allow remote_prov_app { |
| app_api_service |
| mediametrics_service |
| remoteprovisioning_service |
| }:service_manager find; |
