1(typeattribute vendordomain) 2(typeattributeset vendordomain ((and (domain) ((not (coredomain)))))) 3 4;; TODO: Once 30.0 is no longer supported for vendor images, 5;; mlsvendorcompat can be completely from the system policy. 6(typeattributeset mlsvendorcompat (and appdomain vendordomain)) 7(allow mlsvendorcompat app_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir))) 8(allow mlsvendorcompat app_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads))) 9(allow mlsvendorcompat privapp_data_file (dir (ioctl read write create getattr setattr lock rename open watch watch_reads add_name remove_name reparent search rmdir))) 10(allow mlsvendorcompat privapp_data_file (file (ioctl read write create getattr setattr lock append map unlink rename open watch watch_reads))) 11