Point references at pawletprofiled (renamed PawletOS fork of vesperprofiled)

This commit is contained in:
2026-07-25 00:54:36 -07:00
parent ae9e830f7f
commit 2ff76cb35b
3 changed files with 15 additions and 14 deletions
+4 -4
View File
@@ -25,10 +25,10 @@ allow pawlet_cache servicediscovery_service:service_manager find;
# Callers bind IPawletCacheService — see bg_upd.te's binder_call(bg_upd, pawlet_cache).
# Enterprise policy override, written by PawletOS's own fork of vesperprofiled
# (git.oxmc.me/PawletOS/profiled — see PolicyOverride.kt). Its
# ContentCacheHandler doesn't exist in vesperprofiled's default VesperOS
# build; write-side sepolicy rule lives in that fork's vesperprofiled.te.
# Enterprise policy override, written by pawletprofiled, PawletOS's own fork
# of vesperprofiled (git.oxmc.me/PawletOS/profiled — see PolicyOverride.kt).
# Its ContentCacheHandler doesn't exist in stock/upstream vesperprofiled;
# write-side sepolicy rule lives in that fork's pawletprofiled.te.
type pawletcache_policy_file, file_type, data_file_type;
allow pawlet_cache pawletcache_policy_file:file { read open getattr };
allow pawlet_cache pawletcache_policy_file:dir { read open getattr search };
+5 -5
View File
@@ -21,11 +21,11 @@ object Constants {
const val CACHE_TRUST_ROOT_PUBKEY_BASE64 =
"REPLACE_WITH_REAL_OXMC_ME_ED25519_PUBLIC_KEY_SPKI_BASE64"
// Enterprise override written at runtime by PawletOS's own fork of
// vesperprofiled's "content-cache" payload handler (MDM-pushed, mutable)
// — see vesperprofiled-config-schema and PolicyOverride.kt. Doesn't
// exist in vesperprofiled's default VesperOS build; PawletOS-fork-only.
// Wins over VENDOR_POLICY_PATH when both are present.
// Enterprise override written at runtime by pawletprofiled's
// "content-cache" payload handler (MDM-pushed, mutable) — PawletOS's own
// fork of vesperprofiled, see pawletprofiled-config-schema and
// PolicyOverride.kt. Doesn't exist in stock/upstream vesperprofiled;
// PawletOS-fork-only. Wins over VENDOR_POLICY_PATH when both are present.
const val POLICY_OVERRIDE_PATH = "/data/misc/pawletcache/policy.json"
// OEM/vendor-baked default policy, shipped with the system image on the
+6 -5
View File
@@ -14,11 +14,12 @@ import java.io.File
* Discovery policy, resolved from three tiers, most specific wins:
*
* 1. [Constants.POLICY_OVERRIDE_PATH] — runtime override, written by
* PawletOS's own fork of vesperprofiled's "content-cache" MDM payload
* handler (see vesperprofiled-config-schema/schema/profile.schema.yml).
* Doesn't exist in vesperprofiled's default VesperOS build — this is
* PawletOS fork-specific code, added once that fork exists. Mutable,
* can arrive any time after first boot.
* pawletprofiled's "content-cache" MDM payload handler — PawletOS's own
* fork of vesperprofiled (see
* pawletprofiled-config-schema/schema/profile.schema.yml). Doesn't exist
* in stock/upstream vesperprofiled — this is PawletOS fork-specific
* code, added once that fork exists. Mutable, can arrive any time after
* first boot.
* 2. [Constants.VENDOR_POLICY_PATH] — OEM/vendor-baked default, shipped on
* the read-only vendor partition at build time (see
* android_packages_apps_PawletCache/vendor-config/README.md). This is