type wephone_exec, exec_type, file_type; domain_auto_trans(init, wephone_exec); allow { appdomain shell } wephone:file { getattr read open execute execute_no_trans };