20fe1f6f2214c659698eab7677cb583bc67981b5 - platform_frameworks_base

commit	20fe1f6f2214c659698eab7677cb583bc67981b5	[log] [tgz]
author	Victor Hsieh <victorhsieh@google.com>	Mon Sep 30 13:36:21 2019 -0700
committer	Victor Hsieh <victorhsieh@google.com>	Mon Dec 23 09:21:19 2019 -0800
tree	09c3b67c523ef9a92eabe565c7c1626fed44fff8
parent	18e52123cee888bdc322668f1a61d2ebef6d4ae6 [diff]

New API for query trust of a fs-verity certificate

The corresponding service is also added.

The API can be used by a store to know whether their certificate is
trusted on the device. As optimization, they only need to download
.fsv_sig signature file if it will be used.

The API can also be used to gradually switch to stronger key. The store
can query with their certificates in priority order and download the best
signature.

Test: Passed new GTS working in progress
Bug: 142573505
Change-Id: Ic788cd04aeaed35ad62113fe9e7535b8fa63b5ee

api/current.txt[diff]
core/java/android/app/SystemServiceRegistry.java[diff]
core/java/android/content/Context.java[diff]
core/java/android/security/FileIntegrityManager.java[Added - diff]
core/java/android/security/IFileIntegrityService.aidl[Added - diff]
services/core/java/com/android/server/security/FileIntegrityService.java[Added - diff]
services/java/com/android/server/SystemServer.java[diff]

7 files changed