1# mtectrl is a tool to request MTE (Memory Tagging Extensions) from the bootloader.
2type mtectrl, domain, coredomain;
3type mtectrl_exec, system_file_type, exec_type, file_type;
4
5init_daemon_domain(mtectrl)
6
7# to set the sys prop to match the bootloader message state.
8set_prop(mtectrl, arm64_memtag_prop)
9
10# mtectrl communicates the request to the bootloader via the misc partition.
11# needs to write to update the request in misc partition, and read to sync
12# back to the property.
13allow mtectrl misc_block_device:blk_file rw_file_perms;
14allow mtectrl block_device:dir r_dir_perms;
15read_fstab(mtectrl)
16
17# bootloader_message tries to find the fstab in the device config path first,
18# but because we've already booted up we can use the ro.boot properties instead,
19# so we can just ignore the SELinux denial.
20dontaudit mtectrl sysfs_dt_firmware_android:dir search;
21dontaudit mtectrl vendor_property_type:file read;
22