diff options
| author | Pete Bentley <prb@google.com> | 2022-09-23 12:09:32 +0100 |
|---|---|---|
| committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | 2022-11-15 01:50:07 +0000 |
| commit | 841946be56adc4efb5f3ffa59ecd720a2f1de83a (patch) | |
| tree | 32ea8afca7d00238f0fa1f7e153238d0d3fe8925 /code_coverage/empty_policy/code_coverage.arm.policy | |
| parent | ec18f508f9934fc9548fff6b0532452200defdbe (diff) | |
Add AID for PRNG seeder daemon.
Also adjust permissions on /dev/hw_random to allow prng_seeder group
read access.
Manual testing protocol:
* Verify prng_seeder daemon is running and has the
correct label and uid/gid.
* Verify prng_seeder socket present and has correct
label and permissions
* Verify no SELinux denials
* strace a libcrypto process and verify it reads seeding
data from prng_seeder (e.g. strace bssl rand -hex 1024)
* strace seeder daemon to observe incoming connections
(e.g. strace -f -p `pgrep prng_seeder`)
* Kill daemon, observe that init restarts it
* strace again and observe clients now seed from new instance
Bug: 243933553
Test: Manual - see above
Change-Id: I4d526844b232fc2a1fa5ffd701ca5bc5c09e7e96
Merged-In: I4d526844b232fc2a1fa5ffd701ca5bc5c09e7e96
(cherry picked from commit 6cb61610e619e31bd22c12895ec0ca623f793127)
(cherry picked from commit 046a809a90814bcea76aec1ec26d464db3b686dd)
Merged-In: I4d526844b232fc2a1fa5ffd701ca5bc5c09e7e96
Diffstat (limited to 'code_coverage/empty_policy/code_coverage.arm.policy')
0 files changed, 0 insertions, 0 deletions