1# Citadel
2PRODUCT_PACKAGES += \
3    citadeld \
4    citadel_updater \
5    android.hardware.authsecret@1.0-service.citadel \
6    android.hardware.oemlock@1.0-service.citadel \
7    android.hardware.weaver@1.0-service.citadel \
8    android.hardware.keymaster@4.1-service.citadel \
9    android.hardware.identity@1.0-service.citadel \
10    android.hardware.fastboot@1.1-impl.pixel \
11    wait_for_strongbox
12
13# Citadel debug stuff
14PRODUCT_PACKAGES_DEBUG += \
15    test_citadel
16
17# Resume on Reboot support
18PRODUCT_PACKAGES += \
19    android.hardware.rebootescrow-service.citadel
20
21# init scripts (won't be in AOSP)
22-include vendor/google_nos/init/citadel/init.mk
23
24ifneq ($(wildcard vendor/google_nos/provision),)
25PRODUCT_PACKAGES_DEBUG += CitadelProvision
26
27# Set CITADEL_LAZY_PSK_SYNC to true on projects with faceauth, otherwise false.
28#
29#      EVT devices left the factory without being provisioned,
30#      and thus the shared authtoken key is yet to be established.
31#      Since faceauth HAT enforcement fails without the preshared
32#      authtoken, auto-sync it in the field for userdebug/eng.
33#      Please refer to b/135295587 for more detail.
34#
35CITADEL_LAZY_PSK_SYNC := false
36endif
37
38# Sepolicy
39BOARD_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/citadel
40