1 # idmap, when executed by installd 2 type idmap, domain, domain_deprecated; 3 type idmap_exec, exec_type, file_type; 4 5 # Use open file to /data/resource-cache file inherited from installd. 6 allow idmap installd:fd use; 7 allow idmap resourcecache_data_file:file { getattr read write }; 8 9 # Open and read from target and overlay apk files passed by argument. 10 allow idmap apk_data_file:file r_file_perms; 11
