1*e4a36f41SAndroid Build Coastguard Workertypeattribute shared_relro coredomain; 2*e4a36f41SAndroid Build Coastguard Worker 3*e4a36f41SAndroid Build Coastguard Worker# The shared relro process is a Java program forked from the zygote, so it 4*e4a36f41SAndroid Build Coastguard Worker# inherits from app to get basic permissions it needs to run. 5*e4a36f41SAndroid Build Coastguard Workerapp_domain(shared_relro) 6*e4a36f41SAndroid Build Coastguard Worker 7*e4a36f41SAndroid Build Coastguard Workerallow shared_relro shared_relro_file:dir rw_dir_perms; 8*e4a36f41SAndroid Build Coastguard Workerallow shared_relro shared_relro_file:file create_file_perms; 9*e4a36f41SAndroid Build Coastguard Worker 10*e4a36f41SAndroid Build Coastguard Workerallow shared_relro activity_service:service_manager find; 11*e4a36f41SAndroid Build Coastguard Workerallow shared_relro webviewupdate_service:service_manager find; 12*e4a36f41SAndroid Build Coastguard Workerallow shared_relro package_service:service_manager find; 13*e4a36f41SAndroid Build Coastguard Worker 14*e4a36f41SAndroid Build Coastguard Worker# StrictMode may attempt to find this service, failure is harmless. 15*e4a36f41SAndroid Build Coastguard Workerdontaudit shared_relro network_management_service:service_manager find; 16