sepolicy : Define policy for wcnss service domain

Adding wcnss domain and secontext needed for this domain.

Change-Id: I905a0e7b3e1672ead5980b81134c4d1a9b5164e5
This commit is contained in:
Samir Mehta
2014-10-30 12:49:26 +05:30
committed by Steve Kondik
parent 4224895441
commit 0599820753
4 changed files with 21 additions and 1 deletions

View File

@@ -86,7 +86,8 @@ BOARD_SEPOLICY_UNION += \
location_app.te \
seapp_contexts \
logd.te \
installd.te
installd.te \
wcnss_service.te
# Compile sensor pilicy only for SSC targets
SSC_TARGET_LIST := apq8084

2
common/device.te Normal file → Executable file
View File

@@ -72,6 +72,8 @@ type usb_uicc_device, dev_type;
# Define IPA devices
type ipa_dev, dev_type;
type wcnss_device, dev_type;
type mmc_block_device, dev_type;
#Define Gadget serial device

View File

@@ -50,6 +50,8 @@
/dev/block/mmcblk0 u:object_r:mmc_block_device:s0
/dev/rmnet_ctrl.* u:object_r:rmnet_device:s0
/dev/dpl_ctrl u:object_r:rmnet_device:s0
/dev/wcnss_ctrl u:object_r:wcnss_device:s0
/dev/wcnss_wlan u:object_r:wcnss_device:s0
###################################
# Dev socket nodes
@@ -145,6 +147,7 @@
/system/bin/gpsone_daemon u:object_r:location_exec:s0
/system/vendor/bin/slim_ap_daemon u:object_r:location_exec:s0
/system/vendor/bin/qti u:object_r:qti_exec:s0
/system/bin/wcnss_service u:object_r:wcnss_service_exec:s0
###################################
# sysfs files

14
common/wcnss_service.te Normal file
View File

@@ -0,0 +1,14 @@
type wcnss_service, domain;
type wcnss_service_exec, exec_type, file_type;
init_daemon_domain(wcnss_service)
unix_socket_connect(wcnss_service, property, init)
allow wcnss_service wcnss_device:chr_file rw_file_perms;
qmux_socket(wcnss_service);
allow wcnss_service wifi_data_file:dir w_dir_perms;
allow wcnss_service wifi_data_file:file create_file_perms;
allow wcnss_service system_prop:property_service set;