1# installer daemon 2type installd, domain; 3type installd_exec, exec_type, file_type; 4 5init_daemon_domain(installd) 6typeattribute installd mlstrustedsubject; 7allow installd self:capability { chown dac_override fowner fsetid setgid setuid }; 8allow installd system_data_file:file create_file_perms; 9allow installd system_data_file:lnk_file create; 10allow installd dalvikcache_data_file:file create_file_perms; 11allow installd data_file_type:dir create_dir_perms; 12allow installd data_file_type:dir { relabelfrom relabelto }; 13allow installd data_file_type:file { getattr unlink }; 14allow installd apk_data_file:file r_file_perms; 15allow installd apk_tmp_file:file r_file_perms; 16allow installd system_file:file x_file_perms; 17allow installd cgroup:dir create_dir_perms; 18dontaudit installd self:capability sys_admin; 19# Check validity of SELinux context before use. 20selinux_check_context(installd) 21# Read /seapp_contexts, presently on the rootfs. 22allow installd rootfs:file r_file_perms; 23