From af6faa70bf1751553928a6d738de6966ee5a603e Mon Sep 17 00:00:00 2001
From: Christopher Wiley <wiley@google.com>
Date: Mon, 15 Aug 2016 12:58:58 -0700
Subject: [PATCH] Allow wificond to clean up wpa_supplicant state

system_server communicates with wpa_supplicant via various control
sockets.  Allow wificond to unlink these sockets after killing
wpa_supplicant.

Bug: 30666540
Change-Id: Ic1419a587f066c36723c24518952025834959535
(cherry picked from commit ba96cd1cc3e2f4f57f67e866ee7a37b6f19b8491)
---
 wificond.te | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/wificond.te b/wificond.te
index e873ec5eb..eba98da09 100644
--- a/wificond.te
+++ b/wificond.te
@@ -36,3 +36,8 @@ allow wificond self:capability { chown fowner };
 allow wificond hostapd:process { signal signull };
 # wificond needs kill to drop mad signals on hostapd.
 allow wificond self:capability kill;
+
+# wificond cleans up sockets created by wpa_supplicant and framework
+allow wificond wpa_socket:dir rw_dir_perms;
+allow wificond system_wpa_socket:sock_file unlink;
+allow wificond wpa_socket:sock_file unlink;