oxmc
3007839721
- VesperProfileBinderService + main_android.cpp: real Android AIDL Binder service backing IVesperProfileService, wired into Android.bp's srcs (previously declared but never implemented). - SignatureVerifier: real CMS verification on Android too, via a vendored static OpenSSL (see third_party/openssl-android/README.md) since BoringSSL has no CMS/PKCS#7 support. - ProfileStore: Android-appropriate data paths. - Every payload handler split into src/platform/<Name>.h (shared contract) + src/platform/linux/<Name>.cpp + src/platform/android/<Name>.cpp, so the build system picks the platform instead of #ifdef. Android side is an honest "not implemented yet" stub per handler, logged rather than silent. - content-cache payload + handler: PawletOS-fork-specific, talks to PawletCache/pawletcache-server. Not part of vesperprofiled's own upstream default.
31 lines
1.7 KiB
Plaintext
31 lines
1.7 KiB
Plaintext
# vendor/oxmc/vesperprofiled/vesperprofiled.rc
|
|
# ─────────────────────────────────────────────────────────────────────────
|
|
# Android init language script — starts vesperprofiled at boot.
|
|
# Placed in /system/etc/init/ by the build system via init_rc in Android.bp.
|
|
# ─────────────────────────────────────────────────────────────────────────
|
|
|
|
service vesperprofiled /system/bin/vesperprofiled
|
|
class main
|
|
user system
|
|
group system
|
|
# Capabilities needed to write to /data/system/vesperos/ and to
|
|
# call privileged Binder services (DevicePolicyManager, KeyChain, etc.)
|
|
capabilities SETUID SETGID
|
|
# Restart automatically if the daemon crashes.
|
|
restart_period 5
|
|
# SELinux domain (matches the type defined in vesperprofiled.te)
|
|
seclabel u:r:vesperprofiled:s0
|
|
# Only start once the filesystem is decrypted and /data is available.
|
|
on_property:vold.decrypt=trigger_restart_framework
|
|
|
|
# Create the data directory on first boot.
|
|
on post-fs-data
|
|
mkdir /data/system/vesperos 0700 system system
|
|
mkdir /data/system/vesperos/profiles 0700 system system
|
|
mkdir /data/system/vesperos/preinstalled 0700 system system
|
|
# content-cache payload's policy override — world-readable by design,
|
|
# PawletCacheService (a regular app UID) reads it directly. See
|
|
# PayloadHandlers.cpp's ContentCacheHandler and PolicyOverride.kt.
|
|
# PawletOS-fork-specific (see PayloadHandlers.cpp's header comment).
|
|
mkdir /data/misc/pawletcache 0755 system system
|