1 # dex2oat 2 type dex2oat, domain; 3 type dex2oat_exec, exec_type, file_type; 4 5 allow dex2oat dalvikcache_data_file:file write; 6 allow dex2oat installd:fd use; 7 8 # Read already open asec_apk_file file descriptors passed by installd. 9 # Also allow reading unlabeled files, to allow for upgrading forward 10 # locked APKs. 11 allow dex2oat asec_apk_file:file read; 12 allow dex2oat unlabeled:file read; 13