keymaster: Check system_state if provisioning is allowed
This adds a dependency on the system_state server. If this changed is
merged into a project that uses the previous keymaster provisioning
scheme, then a system_state server will need to be added that returns
SYSTEM_STATE_FLAG_PROVISIONING_ALLOWED_VALUE_ALLOWED_AT_BOOT for
SYSTEM_STATE_FLAG_PROVISIONING_ALLOWED. This can be done by adding:
TRUSTY_BUILTIN_USER_TASKS += \
trusty/user/base/app/system_state_server_static \
STATIC_SYSTEM_STATE_FLAG_PROVISIONING_ALLOWED := 2
to the top project .mk file.
Bug: 154033394
Change-Id: I72e227557cc8f9b5c8d1670337d14799ca3bc830
2 files changed