Bound service BgUpd consults before downloading component assets: discovers a trusted cache server (mDNS and/or central lookup, policy- configurable), verifies its signed CacheToken against a pinned root key, and hands back a rewritten URL + TLS pin. Three-tier discovery policy (runtime MDM override -> vendor-baked default -> compiled default). Pairs with pawletcache-server (the LAN daemon) and BgUpd (the caller).
5 lines
215 B
Plaintext
5 lines
215 B
Plaintext
/data/misc/pawletcache(/.*)? u:object_r:pawletcache_policy_file:s0
|
|
|
|
# OEM/vendor-baked default policy — see vendor-config/README.md.
|
|
/vendor/etc/pawletcache(/.*)? u:object_r:pawletcache_vendor_config_file:s0
|