type cloudserver_dt,domain,coredomain; type cloudserver_dt_exec, exec_type, file_type,system_file_type; init_daemon_domain(cloudserver_dt) allow cloudserver_dt servicemanager:binder { call transfer }; allow cloudserver_dt cloudservice_service:service_manager { add find }; allow cloudserver_dt device:file {open write}; allow cloudserver_dt untrusted_app:fd { use }; allow cloudserver_dt platform_app:fd { use }; allow cloudserver_dt fuse:file rw_file_perms; allow cloudserver_dt device:dir {open read search}; # rtc selinux allow cloudserver_dt system_app:fd use;