1is_flag_enabled(RELEASE_AVF_ENABLE_EARLY_VM, ` 2 # Domain for a child process that manages early VMs available before /data mount, on behalf of 3 # its parent. 4 starting_at_board_api(202504, ` 5 type early_virtmgr, domain, coredomain; 6 type early_virtmgr_exec, system_file_type, exec_type, file_type; 7 ') 8') 9 10# system/sepolicy/public is for vendor-facing type and attribute definitions. 11# DO NOT ADD allow, neverallow, or dontaudit statements here. 12# Instead, add such policy rules to system/sepolicy/private/*.te. 13