11 lines
442 B
Text
11 lines
442 B
Text
|
# Process which creates/updates shared RELRO files to be used by other apps.
|
||
|
|
type shared_relro, domain;
|
||
|
|
|
||
|
|
# The shared relro process is a Java program forked from the zygote, so it
|
||
|
|
# inherits from app to get basic permissions it needs to run.
|
||
|
|
app_domain(shared_relro)
|
||
|
|
|
||
|
|
# Grant write access to the shared relro files/directory.
|
||
|
|
allow shared_relro shared_relro_file:dir rw_dir_perms;
|
||
|
|
allow shared_relro shared_relro_file:file create_file_perms;
|