diff --git a/seapp_contexts b/seapp_contexts index f92d1183514eb010ed235961e08cc6d78fe2eb4d..4469b7564f542a5cd7d819c21a554a02358193d5 100644 --- a/seapp_contexts +++ b/seapp_contexts @@ -45,7 +45,7 @@ user=system seinfo=platform domain=system_app type=system_app_data_file user=bluetooth seinfo=platform domain=bluetooth type=bluetooth_data_file user=nfc seinfo=platform domain=nfc type=nfc_data_file user=radio seinfo=platform domain=radio type=radio_data_file -user=shared_relro seinfo=platform domain=shared_relro +user=shared_relro domain=shared_relro user=shell seinfo=platform domain=shell type=shell_data_file user=_isolated domain=isolated_app levelFrom=user user=_app seinfo=platform domain=platform_app type=app_data_file levelFrom=user diff --git a/shared_relro.te b/shared_relro.te index 54bdbb9cdfb1cc2fa51ea496deb72d7f3474d116..8ad53d344907a41000d44abf2e5742abb43dadc5 100644 --- a/shared_relro.te +++ b/shared_relro.te @@ -8,3 +8,6 @@ app_domain(shared_relro) # Grant write access to the shared relro files/directory. allow shared_relro shared_relro_file:dir rw_dir_perms; allow shared_relro shared_relro_file:file create_file_perms; + +# Needs to contact the "webviewupdate" and "activity" services +allow shared_relro system_server_service:service_manager find;