summaryrefslogtreecommitdiffstats
path: root/sepolicy
diff options
context:
space:
mode:
authorPawit Pornkitprasan <p.pawit@gmail.com>2014-11-27 20:18:18 +0700
committerSteve Kondik <steve@cyngn.com>2014-11-29 23:33:52 -0800
commite815923b0d31cab8b16dd75f270da077f2efa678 (patch)
tree24e67d69d297a96d3c35b030d45d0dc8ff51533b /sepolicy
parent9e0dba30b7349a72e190a1ff3df961f65cf4dac6 (diff)
downloadvendor_replicant-e815923b0d31cab8b16dd75f270da077f2efa678.zip
vendor_replicant-e815923b0d31cab8b16dd75f270da077f2efa678.tar.gz
vendor_replicant-e815923b0d31cab8b16dd75f270da077f2efa678.tar.bz2
vendor: add policies for netd
Required due to CAF's abc9c0f4fe574ee9847f118e5d2ae8c530bac650 in system/netd Fixes showing how many devices are connected to the tethered hotspot Change-Id: I1d83f7ac0b28efa6973e0baf429de2a398c471e3
Diffstat (limited to 'sepolicy')
-rw-r--r--sepolicy/hostapd.te1
-rw-r--r--sepolicy/netd.te4
-rw-r--r--sepolicy/sepolicy.mk1
-rw-r--r--sepolicy/system.te3
4 files changed, 9 insertions, 0 deletions
diff --git a/sepolicy/hostapd.te b/sepolicy/hostapd.te
new file mode 100644
index 0000000..8a70f14
--- /dev/null
+++ b/sepolicy/hostapd.te
@@ -0,0 +1 @@
+allow hostapd netd:unix_dgram_socket sendto;
diff --git a/sepolicy/netd.te b/sepolicy/netd.te
index 4ad0b3e..9a0de3f 100644
--- a/sepolicy/netd.te
+++ b/sepolicy/netd.te
@@ -2,3 +2,7 @@ allow netd self:capability { setuid sys_module setgid };
allow netd self:packet_socket create_socket_perms;
allow netd radio_data_file:dir rw_dir_perms;
allow netd radio_data_file:file create_file_perms;
+allow netd wpa_socket:dir rw_dir_perms;
+allow netd wpa_socket:sock_file create_file_perms;
+allow netd system_wpa_socket:sock_file create_file_perms;
+allow netd hostapd:unix_dgram_socket sendto;
diff --git a/sepolicy/sepolicy.mk b/sepolicy/sepolicy.mk
index 04fcac7..a08e74a 100644
--- a/sepolicy/sepolicy.mk
+++ b/sepolicy/sepolicy.mk
@@ -15,6 +15,7 @@ BOARD_SEPOLICY_UNION += \
service_contexts \
auditd.te \
healthd.te \
+ hostapd.te \
installd.te \
netd.te \
property.te \
diff --git a/sepolicy/system.te b/sepolicy/system.te
index 02d9e09..ca07e6f 100644
--- a/sepolicy/system.te
+++ b/sepolicy/system.te
@@ -3,3 +3,6 @@ allow system_server dalvikcache_data_file:file write;
# allow adb related properties to be set
allow system_server adbtcp_prop:property_service set;
+
+allow system_server dhcp_data_file:dir r_dir_perms;
+allow system_server dhcp_data_file:file r_file_perms;