oxmc
ae9e830f7f
Bound service BgUpd consults before downloading component assets: discovers a trusted cache server (mDNS and/or central lookup, policy- configurable), verifies its signed CacheToken against a pinned root key, and hands back a rewritten URL + TLS pin. Three-tier discovery policy (runtime MDM override -> vendor-baked default -> compiled default). Pairs with pawletcache-server (the LAN daemon) and BgUpd (the caller).
38 lines
912 B
Plaintext
38 lines
912 B
Plaintext
//
|
|
// Copyright (C) 2026 oxmc / PawletOS
|
|
//
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
//
|
|
|
|
// Shared with BgUpd (and later the OTA/media resolvers) so callers can bind
|
|
// IPawletCacheService without duplicating the AIDL sources.
|
|
aidl_interface {
|
|
name: "pawletos.cache-aidl",
|
|
unstable: true,
|
|
local_include_dir: "aidl",
|
|
srcs: ["aidl/pawletos/cache/*.aidl"],
|
|
}
|
|
|
|
android_app {
|
|
name: "PawletCache",
|
|
|
|
srcs: ["src/**/*.kt"],
|
|
resource_dirs: ["res"],
|
|
manifest: "AndroidManifest.xml",
|
|
|
|
// No hidden-API/privileged-permission surface needed — just platform-signed
|
|
// so BgUpd (also platform-signed) can hold the signature-level BIND_RESOLVER
|
|
// permission this app defines.
|
|
certificate: "platform",
|
|
system_ext_specific: true,
|
|
|
|
static_libs: [
|
|
"androidx.core_core-ktx",
|
|
"pawletos.cache-aidl-java",
|
|
],
|
|
|
|
optimize: {
|
|
enabled: false,
|
|
},
|
|
}
|