typeattribute iorap_inode2filename coredomain; # Grant access to open most of the files under / allow iorap_inode2filename dalvikcache_data_file:dir { getattr open read search }; allow iorap_inode2filename dalvikcache_data_file:file { getattr }; allow iorap_inode2filename dex2oat_exec:lnk_file { getattr open read }; allow iorap_inode2filename dexoptanalyzer_exec:file { getattr }; allow iorap_inode2filename storaged_data_file:dir { getattr open read search }; allow iorap_inode2filename storaged_data_file:file { getattr };