1 ### 2 ### Services with isolatedProcess=true in their manifest. 3 ### 4 ### This file defines the rules for isolated apps. An "isolated 5 ### app" is an APP with UID between AID_ISOLATED_START (99000) 6 ### and AID_ISOLATED_END (99999). 7 ### 8 ### isolated_app includes all the appdomain rules, plus the 9 ### additional following rules: 10 ### 11 12 type isolated_app, domain; 13 permissive isolated_app; 14 app_domain(isolated_app) 15 16 # Appdomain interaction with isolated apps 17 r_dir_file(appdomain, isolated_app) 18 19 # Already connected, unnamed sockets being passed over some other IPC 20 # hence no sock_file or connectto permission. This appears to be how 21 # Chrome works, may need to be updated as more apps using isolated services 22 # are examined. 23 allow isolated_app appdomain:unix_stream_socket { read write }; 24
