Allow system_server to set arm64 memtag property

Bug: 262763327
Bug: 244290023
Test: atest MtePolicyTest on user build
Test: manually with TestDPC
Change-Id: If1ed257fede6fa424604eed9775eb3a3b8365afe
This commit is contained in:
Florian Mayer 2022-12-16 16:50:13 -08:00
parent a0f59cffe2
commit 152f832904
2 changed files with 2 additions and 0 deletions

View file

@ -432,6 +432,7 @@ neverallow {
-init
-shell
-system_app
-system_server
-mtectrl
} {
arm64_memtag_prop

View file

@ -762,6 +762,7 @@ set_prop(system_server, device_config_virtualization_framework_native_prop)
set_prop(system_server, device_config_memory_safety_native_prop)
set_prop(system_server, device_config_remote_key_provisioning_native_prop)
set_prop(system_server, smart_idle_maint_enabled_prop)
set_prop(system_server, arm64_memtag_prop)
# Allow query ART device config properties
get_prop(system_server, device_config_runtime_native_boot_prop)