1type vtpm_manager, domain;
2type vtpm_manager_exec, exec_type, vendor_file_type, file_type;
3type vtpm_manager_port_prop, property_type;
4type vtpm_manager_status_prop, property_type;
5
6init_daemon_domain(vtpm_manager)
7
8type cuttlefish_vsock_tpm_port, property_type;
9
10type vtpm_creation_device, dev_type;
11allow vtpm_manager vtpm_creation_device:{ file chr_file blk_file } rw_file_perms;
12allow vtpm_manager tmpfs:chr_file { create setattr unlink rw_file_perms write };
13
14allow vtpm_manager self:capability {net_admin sys_admin};
15allow vtpm_manager self:{ socket vsock_socket } create_socket_perms_no_ioctl;
16
17type tpm_resource_manager, dev_type;
18