1 # Process which creates/updates shared RELRO files to be used by other apps. 2 type shared_relro, domain; 3 4 # The shared relro process is a Java program forked from the zygote, so it 5 # inherits from app to get basic permissions it needs to run. 6 app_domain(shared_relro) 7 8 # Grant write access to the shared relro files/directory. 9 allow shared_relro shared_relro_file:dir rw_dir_perms; 10 allow shared_relro shared_relro_file:file create_file_perms; 11
