packaging/key-manager.manifest

   1 <manifest>
   2         <define>
   3                 <domain name="key-manager"/>
   4                 <request>
   5                         <smack request="system::use_internet" type="w"/>
   6                         <smack request="device::app_logging" type="rw"/>
   7                         <smack request="device::sys_logging" type="rw"/>
   8                         <smack request="security-server" type="rx"/>
   9                         <smack request="sys-assert::core" type="rwxat"/>
  10                         <smack request="pkgmgr::info" type="r" />
  11                         <smack request="pkgmgr::db" type="rlx" />
  12                         <smack request="key-manager::api-control" type="w"/>
  13                         <smack request="ca-certificates::ssl-certs" type="rx"/>
  14                         <smack request="systemd" type="rx"/>
  15                         <smack request="connman" type="w"/>
  16                 </request>
  17                 <permit>
  18                         <smack permit="system::use_internet" type="w"/>
  19                         <smack permit="connman" type="w"/>
  20                 </permit>
  21         </define>
  22         <request>
  23                 <domain name="key-manager" />
  24         </request>
  25         <assign>
  26                 <filesystem path="/etc/opt/upgrade/230.key-manager-migrate-dkek.patch.sh" label="_" exec_label="none"/>
  27                 <filesystem path="/opt/data/ckm" label="key-manager" type="transmutable"/>
  28         </assign>
  29 </manifest>