oxmc
a48077078c
Android counterpart to git.oxmc.me/PawletOS/profiled's Linux daemon -- independent implementation, not a port. Same .vconfig profile format and 17 payload types, but implemented against DevicePolicyManager/VpnManager/ WifiManager/WallpaperManager/KeyChain instead of a native NDK Binder daemon, since that's where AOSP actually exposes this functionality. Self-provisions as device owner at first boot (DeviceOwnerProvisioner.kt) to unlock the DevicePolicyManager-gated payload types (cert, pkcs12, passcode, proxy, screensaver lock enforcement). 16 of 17 payload types are real implementations; firewall is a documented platform dead end (no app UID gets CAP_NET_ADMIN). See README's capability matrix for the full per-payload breakdown. Reviewed against the documented @SystemApi/hidden-API surface, not compiled -- no AOSP toolchain available in this environment.
12 lines
600 B
Plaintext
12 lines
600 B
Plaintext
# vendor/oxmc/PawletProfiled/sepolicy/file_contexts
|
|
|
|
/system/priv-app/PawletProfiled(/.*)? u:object_r:system_file:s0
|
|
|
|
# Covers profiles/, preinstalled/, profile_ca.pem, mdm.json, zte_state.json,
|
|
# zte.conf, ldap/, software_update_policy.json, firstboot.done — every
|
|
# state path the app and its payload handlers write under
|
|
# /data/system/pawletos/. See ProfileStore.kt, MdmHandler.kt,
|
|
# ZteLookupClient.kt, LdapHandler.kt, SoftwareUpdateHandler.kt,
|
|
# FirstBootHandler.kt for the individual files.
|
|
/data/system/pawletos(/.*)? u:object_r:pawletos_system_file:s0
|