| Torne (Richard Coles) | 9786af2 | 2014-05-23 11:01:58 +0100 | [diff] [blame] | 1 | # Process which creates/updates shared RELRO files to be used by other apps. |
| 2 | type shared_relro, domain; |
| 3 | |
| 4 | # The shared relro process is a Java program forked from the zygote, so it |
| 5 | # inherits from app to get basic permissions it needs to run. |
| 6 | app_domain(shared_relro) |
| 7 | |
| 8 | # Grant write access to the shared relro files/directory. |
| 9 | allow shared_relro shared_relro_file:dir rw_dir_perms; |
| 10 | allow shared_relro shared_relro_file:file create_file_perms; |
| Nick Kralevich | b5ffbb7 | 2015-01-07 13:52:43 -0800 | [diff] [blame] | 11 | |
| 12 | # Needs to contact the "webviewupdate" and "activity" services |
| dcashman | bd7f580 | 2015-04-08 15:12:24 -0700 | [diff] [blame] | 13 | allow shared_relro webviewupdate_service:service_manager find; |