3aa1c1725e
Move wifi services out of system_server into a separate APK/process. Changes: a) Created sepolicy for the new wifi apk. b) The new APK will run with network_stack uid (eventually will be moved to the same process). Used 'audit2allow' tool to gather list of permissions required. Note: The existing wifi related permissions in system_server is left behind to allow the module to be loaded into system_server or network_stack process depending on device configuration. Bug: 113174748 Test: Device boots up and able to make wifi connection. Test: Tested hotspot functionality. Test: Ran WifiManagerTest & WifiSoftApTest ACTS tests locally. Test: Will send for wifi regression tests. Change-Id: Id19643a235bf0c28238f2729926b893ac2025b97 (cherry-picked from c7aa90091e6bec70a31a643cc4519a9a86fb0b38)
39 lines
1.3 KiB
Plaintext
39 lines
1.3 KiB
Plaintext
domain_auto_trans(vold, vold_prepare_subdirs_exec, vold_prepare_subdirs)
|
|
|
|
allow vold_prepare_subdirs system_file:file execute_no_trans;
|
|
allow vold_prepare_subdirs shell_exec:file rx_file_perms;
|
|
allow vold_prepare_subdirs toolbox_exec:file rx_file_perms;
|
|
allow vold_prepare_subdirs devpts:chr_file rw_file_perms;
|
|
allow vold_prepare_subdirs vold:fd use;
|
|
allow vold_prepare_subdirs vold:fifo_file { read write };
|
|
allow vold_prepare_subdirs file_contexts_file:file r_file_perms;
|
|
allow vold_prepare_subdirs self:global_capability_class_set { chown dac_override dac_read_search fowner };
|
|
allow vold_prepare_subdirs self:process setfscreate;
|
|
allow vold_prepare_subdirs {
|
|
system_data_file
|
|
vendor_data_file
|
|
}:dir { open read write add_name remove_name rmdir relabelfrom };
|
|
allow vold_prepare_subdirs {
|
|
backup_data_file
|
|
face_vendor_data_file
|
|
fingerprint_vendor_data_file
|
|
iris_vendor_data_file
|
|
rollback_data_file
|
|
storaged_data_file
|
|
vold_data_file
|
|
wifi_data_file
|
|
}:dir { create_dir_perms relabelto };
|
|
allow vold_prepare_subdirs {
|
|
backup_data_file
|
|
face_vendor_data_file
|
|
fingerprint_vendor_data_file
|
|
iris_vendor_data_file
|
|
rollback_data_file
|
|
storaged_data_file
|
|
system_data_file
|
|
vold_data_file
|
|
wifi_data_file
|
|
}:file { getattr unlink };
|
|
|
|
dontaudit vold_prepare_subdirs { proc unlabeled }:file r_file_perms;
|