tss: only add EPRO/ESEC if we are sending an Image4 request

1 files changed, 4 insertions, 3 deletions

diff --git a/src/tss.c b/src/tss.c
index 789cc0e..a56322e 100644
--- a/src/tss.c
+++ b/src/tss.c
@@ -330,9 +330,10 @@ int tss_request_add_ap_tags_from_manifest(plist_t request, plist_t build_identit
 		/* remove obsolete Info node */
 		plist_dict_remove_item(tss_entry, "Info");
 
-		/* FIXME: If ApSupportsImg4 */
-		plist_dict_insert_item(tss_entry, "EPRO", plist_new_bool(1));
-		plist_dict_insert_item(tss_entry, "ESEC", plist_new_bool(1));
+		if (plist_access_path(manifest_entry, 2, "Info", "RestoreRequestRules")) {
+			plist_dict_insert_item(tss_entry, "EPRO", plist_new_bool(1));
+			plist_dict_insert_item(tss_entry, "ESEC", plist_new_bool(1));
+		}
 
 		plist_dict_insert_item(request, key, tss_entry);