| typeattribute credstore coredomain; | |
| init_daemon_domain(credstore) | |
| # talk to Identity Credential | |
| hal_client_domain(credstore, hal_identity) | |
| # talk to keymint, specifically for IRemotelyProvisionedComponent/default | |
| hal_client_domain(credstore, hal_keymint) | |
| # credstore needs to get keys from the remotely provisioned pool | |
| allow credstore remotelyprovisionedkeypool_service:service_manager find; |