platform_system_sepolicy/private/mtectrl.te
Inseob Kim 3bd63cc206 Move mtectrl to private
Because mtectrl is a system internal domain, and we don't need to expose
the type to vendor.

Test: build and boot
Change-Id: Idb5c4a4c6f175e338722971944bf08ba99835476
2022-01-26 08:59:55 +09:00

10 lines
403 B
Text

# mtectrl is a tool to request MTE (Memory Tagging Extensions) from the bootloader.
type mtectrl, domain, coredomain;
type mtectrl_exec, system_file_type, exec_type, file_type;
init_daemon_domain(mtectrl)
# mtectrl communicates the request to the bootloader via the misc partition.
allow mtectrl misc_block_device:blk_file w_file_perms;
allow mtectrl block_device:dir r_dir_perms;
read_fstab(mtectrl)