<domain name="key-manager"/>
<request>
<smack request="system::use_internet" type="w"/>
+ <smack request="device::app_logging" type="rw"/>
+ <smack request="device::sys_logging" type="rw"/>
+ <smack request="security-server" type="rx"/>
+ <smack request="sys-assert::core" type="rwxat"/>
+ <smack request="pkgmgr::info" type="r" />
+ <smack request="pkgmgr::db" type="rlx" />
+ <smack request="key-manager::api-control" type="w"/>
+ <smack request="ca-certificates::ssl-certs" type="rx"/>
+ <smack request="systemd" type="rx"/>
+ <smack request="connman" type="w"/>
</request>
<permit>
<smack permit="system::use_internet" type="w"/>
+ <smack permit="connman" type="w"/>
</permit>
</define>
<request>
<domain name="key-manager" />
</request>
<assign>
- <filesystem path="/etc/opt/upgrade/230.key-manager-migrate-dkek.patch.sh" label="_" exec_label="_"/>
+ <filesystem path="/etc/opt/upgrade/230.key-manager-migrate-dkek.patch.sh" label="_" exec_label="none"/>
+ <filesystem path="/opt/data/ckm" label="key-manager" type="transmutable"/>
</assign>
</manifest>