type vtpm_manager, domain;
type vtpm_manager_exec, exec_type, vendor_file_type, file_type;
type vtpm_manager_port_prop, property_type;
type vtpm_manager_status_prop, property_type;

init_daemon_domain(vtpm_manager)

type cuttlefish_vsock_tpm_port, property_type;

type vtpm_creation_device, dev_type;
allow vtpm_manager vtpm_creation_device:{ file chr_file blk_file } rw_file_perms;
allow vtpm_manager tmpfs:chr_file { create setattr unlink rw_file_perms write };

allow vtpm_manager self:capability {net_admin sys_admin};
allow vtpm_manager self:{ socket vsock_socket } create_socket_perms_no_ioctl;

type tpm_resource_manager, dev_type;