1### 2### Services with isolatedProcess=true in their manifest. 3### 4### This file defines the rules for isolated apps. An "isolated 5### app" is an APP with UID between AID_ISOLATED_START (99000) 6### and AID_ISOLATED_END (99999). 7### 8### isolated_app includes all the appdomain rules, plus the 9### additional following rules: 10### 11 12type isolated_app, domain; 13permissive isolated_app; 14app_domain(isolated_app) 15 16# Appdomain interaction with isolated apps 17r_dir_file(appdomain, isolated_app) 18 19# Already connected, unnamed sockets being passed over some other IPC 20# hence no sock_file or connectto permission. This appears to be how 21# Chrome works, may need to be updated as more apps using isolated services 22# are examined. 23allow isolated_app appdomain:unix_stream_socket { read write }; 24