xref: /aosp_15_r20/system/sepolicy/prebuilts/api/33.0/private/mtectrl.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# mtectrl is a tool to request MTE (Memory Tagging Extensions) from the bootloader.
2*e4a36f41SAndroid Build Coastguard Workertype mtectrl, domain, coredomain;
3*e4a36f41SAndroid Build Coastguard Workertype mtectrl_exec, system_file_type, exec_type, file_type;
4*e4a36f41SAndroid Build Coastguard Worker
5*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(mtectrl)
6*e4a36f41SAndroid Build Coastguard Worker
7*e4a36f41SAndroid Build Coastguard Worker# mtectrl communicates the request to the bootloader via the misc partition.
8*e4a36f41SAndroid Build Coastguard Workerallow mtectrl misc_block_device:blk_file w_file_perms;
9*e4a36f41SAndroid Build Coastguard Workerallow mtectrl block_device:dir r_dir_perms;
10*e4a36f41SAndroid Build Coastguard Workerread_fstab(mtectrl)
11