sepolicy/vendor/hal_wifi_ext.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

allow hal_wifi_ext vendor_wlan_device:chr_file rw_file_perms;
allow hal_wifi_ext vendor_wifi_vendor_data_file:dir rw_dir_perms;

# write to files owned by location daemon
allow hal_wifi_ext vendor_location_socket:dir rw_dir_perms;
allow hal_wifi_ext vendor_location_socket:{sock_file lnk_file} create_file_perms;
allow hal_wifi_ext vendor_location:unix_dgram_socket sendto;
allow hal_wifi_ext lowi_server:unix_dgram_socket sendto;

# Connect to vendor_location via vendor_location socket.
unix_socket_connect(hal_wifi, vendor_location, vendor_location)
allow hal_wifi_ext vendor_wifihal_socket:dir rw_dir_perms;
allow hal_wifi_ext vendor_wifihal_socket:sock_file create_file_perms;

# allow hal_wifi to write into /proc/debugdriver/driverdump
r_dir_file(hal_wifi_ext, vendor_proc_wifi_dbg);