[AAPM] Enable MTE support for DevicePolicyManager

Set the system property that lets the DevicePolicyManager know it can
control Memory Tagging Extension on the device.

With this property set, when the user turns on AAPM, it will turn on
MTE.

Bug: 352420507
Test: Manual
Flag: android.security.aapm_feature_memory_tagging_extension
Change-Id: I2cf9b650286659bc36d0e304c1ad05ff5dac4d5c
This commit is contained in:
Eran Messeri 2024-12-11 22:01:42 +00:00
parent 056b4d427e
commit 6f0b8b1180

View file

@ -60,6 +60,9 @@ PRODUCT_PRODUCT_PROPERTIES += persist.arm64.memtag.app.com.android.se=off
PRODUCT_PRODUCT_PROPERTIES += persist.arm64.memtag.app.com.google.android.bluetooth=off
PRODUCT_PRODUCT_PROPERTIES += persist.arm64.memtag.app.com.android.nfc=off
PRODUCT_PRODUCT_PROPERTIES += persist.arm64.memtag.system_server=off
# Also enable the system property that would turn on MTE when Android Advanced
# Protection Mode is turned on.
PRODUCT_PRODUCT_PROPERTIES += ro.arm64.memtag.bootctl_device_policy_manager=true
endif
endif