1typeattribute tombstoned coredomain; 2 3init_daemon_domain(tombstoned) 4 5get_prop(tombstoned, tombstone_config_prop) 6 7neverallow { 8 domain 9 -init 10 -vendor_init 11 -dumpstate 12 -tombstoned 13} tombstone_config_prop:file no_rw_file_perms; 14