Allow Device ID attestation profile owner
The profile owner is allowed to request attestation that includes device
identifiers if it has been granted this permission during set-up
(particularly for corporate-owned devices).
Relax the check in key_store_service to allow that.
Bug: 111335970
Test: Manual, using TestDPC + ADB command.
Test: atest com.android.cts.devicepolicy.ProfileOwnerTest#testDeviceIdAttestationForProfileOwner
Test: atest FrameworksServicesTests:DevicePolicyManagerTest
Change-Id: I018dc1363a257a788c977ae34872a78c9ffd3bcd
1 file changed