commit 39f29f758ebeb4d7a5edc6151d8b24c815cd99aa
author Florian Mayer <fmayer@google.com> Tue Dec 21 12:06:31 2021 -0800
committer Florian Mayer <fmayer@google.com> Fri Jan 07 11:39:10 2022 -0800
tree 66099fdcde51bdcb49642c16f80fb6b15d05a0a6
parent d144fa0333c35661824effc8fee5f60778932ae8

[MTE] Allow system_app to write memtag property.

Bug: 206895651
Change-Id: I6463965c094b9b3c4f3f70929a09e109ee9c84b9

private/property.te

diff --git a/private/property.te b/private/property.te
index 7033a06..91e8bb2 100644
--- a/private/property.te
+++ b/private/property.te
@@ -412,10 +412,12 @@
 
 # Allow the shell to set MTE props, so that non-root users with adb shell
 # access can control the settings on their device.
+# Allow system apps to set MTE props, so Developer Options can set them.
 neverallow {
   domain
   -init
   -shell
+  -system_app
 } {
   arm64_memtag_prop
 }:property_service set;