xref: /aosp_15_r20/system/sepolicy/prebuilts/api/30.0/public/shared_relro.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1# Process which creates/updates shared RELRO files to be used by other apps.
2type shared_relro, domain;
3
4# Grant write access to the shared relro files/directory.
5allow shared_relro shared_relro_file:dir rw_dir_perms;
6allow shared_relro shared_relro_file:file create_file_perms;
7
8# Needs to contact the "webviewupdate" and "activity" services
9allow shared_relro activity_service:service_manager find;
10allow shared_relro webviewupdate_service:service_manager find;
11allow shared_relro package_service:service_manager find;
12