1typeattribute iorap_inode2filename coredomain; 2 3# Grant access to open most of the files under / 4allow iorap_inode2filename { apex_module_data_file apex_art_data_file }:dir r_dir_perms; 5allow iorap_inode2filename apex_data_file:file { getattr }; 6allow iorap_inode2filename dalvikcache_data_file:dir { getattr open read search }; 7allow iorap_inode2filename dalvikcache_data_file:file { getattr }; 8allow iorap_inode2filename dex2oat_exec:lnk_file { getattr open read }; 9allow iorap_inode2filename dexoptanalyzer_exec:file { getattr }; 10allow iorap_inode2filename storaged_data_file:dir { getattr open read search }; 11allow iorap_inode2filename storaged_data_file:file { getattr }; 12