| # Process which creates/updates shared RELRO files to be used by other apps. |
| type shared_relro, domain; |
| |
| # Grant write access to the shared relro files/directory. |
| allow shared_relro shared_relro_file:dir rw_dir_perms; |
| allow shared_relro shared_relro_file:file create_file_perms; |
| |
| # Needs to contact the "webviewupdate" and "activity" services |
| allow shared_relro activity_service:service_manager find; |
| allow shared_relro webviewupdate_service:service_manager find; |
| allow shared_relro package_service:service_manager find; |