1typeattribute kernel coredomain; 2 3domain_auto_trans(kernel, init_exec, init) 4 5# Allow the kernel to read otapreopt_chroot's file descriptors and files under 6# /postinstall, as it uses apexd logic to mount APEX packages in /postinstall/apex. 7allow kernel otapreopt_chroot:fd use; 8allow kernel postinstall_file:file read; 9