aboutsummaryrefslogtreecommitdiffstats
path: root/shared_relro.te
blob: 6a1dfd4242dc197c1b308454fad86c9b413f0929 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
# Process which creates/updates shared RELRO files to be used by other apps.
type shared_relro, domain;

# The shared relro process is a Java program forked from the zygote, so it
# inherits from app to get basic permissions it needs to run.
app_domain(shared_relro)

# Grant write access to the shared relro files/directory.
allow shared_relro shared_relro_file:dir rw_dir_perms;
allow shared_relro shared_relro_file:file create_file_perms;

# Needs to contact the "webviewupdate" and "activity" services
allow shared_relro webviewupdate_service:service_manager find;