Point references at pawletprofiled (renamed PawletOS fork of vesperprofiled)
This commit is contained in:
@@ -25,10 +25,10 @@ allow pawlet_cache servicediscovery_service:service_manager find;
|
||||
|
||||
# Callers bind IPawletCacheService — see bg_upd.te's binder_call(bg_upd, pawlet_cache).
|
||||
|
||||
# Enterprise policy override, written by PawletOS's own fork of vesperprofiled
|
||||
# (git.oxmc.me/PawletOS/profiled — see PolicyOverride.kt). Its
|
||||
# ContentCacheHandler doesn't exist in vesperprofiled's default VesperOS
|
||||
# build; write-side sepolicy rule lives in that fork's vesperprofiled.te.
|
||||
# Enterprise policy override, written by pawletprofiled, PawletOS's own fork
|
||||
# of vesperprofiled (git.oxmc.me/PawletOS/profiled — see PolicyOverride.kt).
|
||||
# Its ContentCacheHandler doesn't exist in stock/upstream vesperprofiled;
|
||||
# write-side sepolicy rule lives in that fork's pawletprofiled.te.
|
||||
type pawletcache_policy_file, file_type, data_file_type;
|
||||
allow pawlet_cache pawletcache_policy_file:file { read open getattr };
|
||||
allow pawlet_cache pawletcache_policy_file:dir { read open getattr search };
|
||||
|
||||
Vendored
+5
-5
@@ -21,11 +21,11 @@ object Constants {
|
||||
const val CACHE_TRUST_ROOT_PUBKEY_BASE64 =
|
||||
"REPLACE_WITH_REAL_OXMC_ME_ED25519_PUBLIC_KEY_SPKI_BASE64"
|
||||
|
||||
// Enterprise override written at runtime by PawletOS's own fork of
|
||||
// vesperprofiled's "content-cache" payload handler (MDM-pushed, mutable)
|
||||
// — see vesperprofiled-config-schema and PolicyOverride.kt. Doesn't
|
||||
// exist in vesperprofiled's default VesperOS build; PawletOS-fork-only.
|
||||
// Wins over VENDOR_POLICY_PATH when both are present.
|
||||
// Enterprise override written at runtime by pawletprofiled's
|
||||
// "content-cache" payload handler (MDM-pushed, mutable) — PawletOS's own
|
||||
// fork of vesperprofiled, see pawletprofiled-config-schema and
|
||||
// PolicyOverride.kt. Doesn't exist in stock/upstream vesperprofiled;
|
||||
// PawletOS-fork-only. Wins over VENDOR_POLICY_PATH when both are present.
|
||||
const val POLICY_OVERRIDE_PATH = "/data/misc/pawletcache/policy.json"
|
||||
|
||||
// OEM/vendor-baked default policy, shipped with the system image on the
|
||||
|
||||
+6
-5
@@ -14,11 +14,12 @@ import java.io.File
|
||||
* Discovery policy, resolved from three tiers, most specific wins:
|
||||
*
|
||||
* 1. [Constants.POLICY_OVERRIDE_PATH] — runtime override, written by
|
||||
* PawletOS's own fork of vesperprofiled's "content-cache" MDM payload
|
||||
* handler (see vesperprofiled-config-schema/schema/profile.schema.yml).
|
||||
* Doesn't exist in vesperprofiled's default VesperOS build — this is
|
||||
* PawletOS fork-specific code, added once that fork exists. Mutable,
|
||||
* can arrive any time after first boot.
|
||||
* pawletprofiled's "content-cache" MDM payload handler — PawletOS's own
|
||||
* fork of vesperprofiled (see
|
||||
* pawletprofiled-config-schema/schema/profile.schema.yml). Doesn't exist
|
||||
* in stock/upstream vesperprofiled — this is PawletOS fork-specific
|
||||
* code, added once that fork exists. Mutable, can arrive any time after
|
||||
* first boot.
|
||||
* 2. [Constants.VENDOR_POLICY_PATH] — OEM/vendor-baked default, shipped on
|
||||
* the read-only vendor partition at build time (see
|
||||
* android_packages_apps_PawletCache/vendor-config/README.md). This is
|
||||
|
||||
Reference in New Issue
Block a user