sepolicy : Define policy for wcnss service domain
Adding wcnss domain and secontext needed for this domain. Change-Id: I905a0e7b3e1672ead5980b81134c4d1a9b5164e5
This commit is contained in:
		
				
					committed by
					
						
						Steve Kondik
					
				
			
			
				
	
			
			
			
						parent
						
							4224895441
						
					
				
				
					commit
					0599820753
				
			@@ -86,7 +86,8 @@ BOARD_SEPOLICY_UNION += \
 | 
			
		||||
       location_app.te \
 | 
			
		||||
       seapp_contexts \
 | 
			
		||||
       logd.te \
 | 
			
		||||
       installd.te
 | 
			
		||||
       installd.te \
 | 
			
		||||
       wcnss_service.te
 | 
			
		||||
 | 
			
		||||
# Compile sensor pilicy only for SSC targets
 | 
			
		||||
SSC_TARGET_LIST := apq8084
 | 
			
		||||
 
 | 
			
		||||
							
								
								
									
										2
									
								
								common/device.te
									
									
									
									
									
										
										
										Normal file → Executable file
									
								
							
							
						
						
									
										2
									
								
								common/device.te
									
									
									
									
									
										
										
										Normal file → Executable file
									
								
							@@ -72,6 +72,8 @@ type usb_uicc_device, dev_type;
 | 
			
		||||
# Define IPA devices
 | 
			
		||||
type ipa_dev, dev_type;
 | 
			
		||||
 | 
			
		||||
type wcnss_device, dev_type;
 | 
			
		||||
 | 
			
		||||
type mmc_block_device, dev_type;
 | 
			
		||||
 | 
			
		||||
#Define Gadget serial device
 | 
			
		||||
 
 | 
			
		||||
@@ -50,6 +50,8 @@
 | 
			
		||||
/dev/block/mmcblk0                              u:object_r:mmc_block_device:s0
 | 
			
		||||
/dev/rmnet_ctrl.*                               u:object_r:rmnet_device:s0
 | 
			
		||||
/dev/dpl_ctrl                                   u:object_r:rmnet_device:s0
 | 
			
		||||
/dev/wcnss_ctrl                                 u:object_r:wcnss_device:s0
 | 
			
		||||
/dev/wcnss_wlan                                 u:object_r:wcnss_device:s0
 | 
			
		||||
 | 
			
		||||
###################################
 | 
			
		||||
# Dev socket nodes
 | 
			
		||||
@@ -145,6 +147,7 @@
 | 
			
		||||
/system/bin/gpsone_daemon                       u:object_r:location_exec:s0
 | 
			
		||||
/system/vendor/bin/slim_ap_daemon               u:object_r:location_exec:s0
 | 
			
		||||
/system/vendor/bin/qti                          u:object_r:qti_exec:s0
 | 
			
		||||
/system/bin/wcnss_service                       u:object_r:wcnss_service_exec:s0
 | 
			
		||||
 | 
			
		||||
###################################
 | 
			
		||||
# sysfs files
 | 
			
		||||
 
 | 
			
		||||
							
								
								
									
										14
									
								
								common/wcnss_service.te
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										14
									
								
								common/wcnss_service.te
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,14 @@
 | 
			
		||||
type wcnss_service, domain;
 | 
			
		||||
type wcnss_service_exec, exec_type, file_type;
 | 
			
		||||
 | 
			
		||||
init_daemon_domain(wcnss_service)
 | 
			
		||||
 | 
			
		||||
unix_socket_connect(wcnss_service, property, init)
 | 
			
		||||
allow wcnss_service wcnss_device:chr_file rw_file_perms;
 | 
			
		||||
 | 
			
		||||
qmux_socket(wcnss_service);
 | 
			
		||||
 | 
			
		||||
allow wcnss_service wifi_data_file:dir w_dir_perms;
 | 
			
		||||
allow wcnss_service wifi_data_file:file create_file_perms;
 | 
			
		||||
 | 
			
		||||
allow wcnss_service system_prop:property_service set;
 | 
			
		||||
		Reference in New Issue
	
	Block a user