# wephone service type wephone, domain; type wephone_exec, exec_type, vendor_file_type, file_type; typeattribute wephone coredomain; init_daemon_domain(foo) allow { appdomain shell } wephone_exec:file { getattr read open execute execute_no_trans };