1bcbc0b667
I need SIOCGIFFLAGS and SIOCSIFFLAGS in order to bring up/down interfaces with AIDL CAN HAL. Bug: 260592449 Test: CAN HAL can bring up interfaces Change-Id: I67edaa857cffdf3c3fc9f3b17aad5879e09c6385
41 lines
1.2 KiB
Plaintext
41 lines
1.2 KiB
Plaintext
type hal_can_socketcan, domain;
|
|
hal_server_domain(hal_can_socketcan, hal_can_controller)
|
|
hal_server_domain(hal_can_socketcan, hal_can_bus)
|
|
|
|
type hal_can_socketcan_exec, exec_type, vendor_file_type, file_type;
|
|
init_daemon_domain(hal_can_socketcan)
|
|
|
|
# Managing SocketCAN interfaces
|
|
allow hal_can_socketcan self:capability net_admin;
|
|
allow hal_can_socketcan self:netlink_route_socket { create bind write nlmsg_write read };
|
|
|
|
# See man page for netdevice(7) for more info on ioctls
|
|
allow hal_can_socketcan self:udp_socket { create ioctl };
|
|
allowxperm hal_can_socketcan self:udp_socket ioctl {
|
|
SIOCGIFINDEX
|
|
SIOCGIFFLAGS
|
|
SIOCSIFFLAGS
|
|
};
|
|
|
|
# Communicating with SocketCAN interfaces and bringing them up/down
|
|
allow hal_can_socketcan self:can_socket { bind create read write ioctl setopt };
|
|
allowxperm hal_can_socketcan self:can_socket ioctl {
|
|
SIOCGIFFLAGS
|
|
SIOCSIFFLAGS
|
|
};
|
|
|
|
# Un-publishing ICanBus interfaces
|
|
allow hal_can_socketcan hidl_manager_hwservice:hwservice_manager find;
|
|
|
|
allow hal_can_socketcan sysfs:dir r_dir_perms;
|
|
|
|
allow hal_can_socketcan usb_serial_device:chr_file { ioctl read write open };
|
|
allowxperm hal_can_socketcan usb_serial_device:chr_file ioctl {
|
|
TCGETS
|
|
TCSETSW
|
|
TIOCGSERIAL
|
|
TIOCSSERIAL
|
|
TIOCSETD
|
|
SIOCGIFNAME
|
|
};
|