# profman
type profman, domain;
type profman_exec, exec_type, file_type;

allow profman user_profile_data_file:file { getattr read write lock };

allow profman installd:fd use;

neverallow profman app_data_file:notdevfile_class_set open;