blob: c97ab5ca14fa8656506ce8e43c12f41a379caf81 [file] [log] [blame]
# Process which creates/updates shared RELRO files to be used by other apps.
type shared_relro, domain;
# The shared relro process is a Java program forked from the zygote, so it
# inherits from app to get basic permissions it needs to run.
# Grant write access to the shared relro files/directory.
allow shared_relro shared_relro_file:dir rw_dir_perms;
allow shared_relro shared_relro_file:file create_file_perms;
# Needs to contact the "webviewupdate" and "activity" services
allow shared_relro tmp_system_server_service:service_manager find;
auditallow shared_relro {
}:service_manager find;