9a14704f62
Wifi Keystore HAL is a HwBinder service (currently offered by keystore
daemon) which is used by Wifi Supplicant HAL. This commit thus
switches the SELinux policy of Wifi Keystore HAL to the approach used
for non-HAL HwBinder services.
The basic idea is simimilar to how we express Binder services in the
policy, with two tweaks: (1) we don't have 'hwservicemanager find' and
thus there's no add_hwservice macro, and (2) we need loosen the
coupling between core and vendor components. For example, it should be
possible to move a HwBinder service offered by a core component into
another core component, without having to update the SELinux policy of
the vendor image. We thus annotate all components offering HwBinder
service x across the core-vendor boundary with x_server, which enables
the policy of clients to contain rules of the form:
binder_call(mydomain, x_server), and, if the service uses IPC
callbacks, also binder_call(x_server, mydomain).
Test: mmm system/sepolicy
Test: sesearch indicates to changes to binder { call transfer} between
keystore and hal_wifi_supplicant_default domains
Bug: 36896667
Change-Id: I45c4ce8159b63869d7bb6df5c812c5291776d892
19 lines
830 B
Plaintext
19 lines
830 B
Plaintext
# wpa supplicant or equivalent
|
|
type hal_wifi_supplicant_default, domain;
|
|
hal_server_domain(hal_wifi_supplicant_default, hal_wifi_supplicant)
|
|
type hal_wifi_supplicant_default_exec, exec_type, file_type;
|
|
init_daemon_domain(hal_wifi_supplicant_default)
|
|
|
|
net_domain(hal_wifi_supplicant_default)
|
|
# Create a socket for receiving info from wpa
|
|
type_transition hal_wifi_supplicant_default wifi_data_file:dir wpa_socket "sockets";
|
|
|
|
# Allow wpa_supplicant to talk to Wifi Keystore HwBinder service.
|
|
hwbinder_use(hal_wifi_supplicant_default)
|
|
binder_call(hal_wifi_supplicant_default, wifi_keystore_service_server)
|
|
|
|
# TODO (b/36645291) Move hal_wifi_supplicant's data access to /data/vendor
|
|
# Remove coredata_in_vendor_violators attribute.
|
|
# wpa supplicant or equivalent
|
|
typeattribute hal_wifi_supplicant_default coredata_in_vendor_violators;
|