# healthd seclabel is specified in init.rc since # it lives in the rootfs and has no unique file type. type healthd, domain; type healthd_exec, exec_type, file_type; init_daemon_domain(healthd) unconfined_domain(healthd) allow healthd rootfs:file entrypoint; write_klog(healthd)