Default deny GPIO access

[marnovandermaas]

Is there a way to default deny the GPIO access through the rego unless you explicitly define that the compartment has access to it?

[HU90m]

Yes this is possible with cheriot-audit's built-in compartment package, specifically the mmio_allow_list rule with an empty allow set.