1# Process which creates/updates shared RELRO files to be used by other apps.
2type shared_relro, domain, domain_deprecated;
3
4# The shared relro process is a Java program forked from the zygote, so it
5# inherits from app to get basic permissions it needs to run.
6app_domain(shared_relro)
7
8# Grant write access to the shared relro files/directory.
9allow shared_relro shared_relro_file:dir rw_dir_perms;
10allow shared_relro shared_relro_file:file create_file_perms;
11
12# Needs to contact the "webviewupdate" and "activity" services
13allow shared_relro webviewupdate_service:service_manager find;
14