sepolicy/policy/chromeos/minijailed.te

type minijailed, cros_miscdomain, chromeos_domain, domain;

permissive minijailed;

domain_auto_trans(minijail, cros_unconfined_exec, minijailed);
dev_only(
auditallow minijail cros_unconfined_exec:file execute;
)