1type trusty_apploader, domain; 2type trusty_apploader_exec, exec_type, vendor_file_type, file_type; 3init_daemon_domain(trusty_apploader) 4 5allow trusty_apploader ion_device:chr_file r_file_perms; 6allow trusty_apploader tee_device:chr_file rw_file_perms; 7allow trusty_apploader dmabuf_system_heap_device:chr_file r_file_perms; 8