google-gs201/android_device_google_lynx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add sepolicy for hal_wifi_ext

Browse Source 
07-27 11:58:09.569   869   869 I auditd  : type=1400 audit(0.0:2682598):
avc: denied { read } for comm="wifi_ext@1.0-se" name="driverdump" dev="proc"
ino=4026535980 scontext=u:r:hal_wifi_ext:s0 tcontext=u:object_r:proc:s0
tclass=file permissive=0

Bug: 239656339
Test: avc error is gone
Change-Id: Icf816897780fecc1bb35696e492e6fa2661abc20
This commit is contained in:
Hsiu-Chang Chen
2022-07-27 13:35:04 +08:00
committed by TreeHugger Robot
parent 20deb31861
commit 0c59021e58
3 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
vendor/file.te vendored
View File

@@ -2,4 +2,5 @@ type vendor_location_data_file, file_type, data_file_type;
type vendor_location_socket, file_type; type vendor_location_socket, file_type;
type vendor_wifi_vendor_data_file, file_type, data_file_type; type vendor_wifi_vendor_data_file, file_type, data_file_type;
type vendor_wifihal_socket, file_type; type vendor_wifihal_socket, file_type;
type vendor_location_sysfs, fs_type, sysfs_type; type vendor_location_sysfs, fs_type, sysfs_type;
type vendor_proc_wifi_dbg, fs_type, proc_type;

1
vendor/genfs_contexts vendored
View File

@@ -3,6 +3,7 @@ genfscon sysfs /devices/platform/10970000.hsi2c/i2c-4/i2c-cs40l26a u
# Wifi # Wifi
genfscon sysfs /devices/soc0/soc_id u:object_r:vendor_location_sysfs:s0 genfscon sysfs /devices/soc0/soc_id u:object_r:vendor_location_sysfs:s0
genfscon proc /debugdriver/driverdump u:object_r:vendor_proc_wifi_dbg:s0
# BMS # BMS
genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-6/i2c-p9222 u:object_r:sysfs_wlc:s0 genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-6/i2c-p9222 u:object_r:sysfs_wlc:s0

3
vendor/hal_wifi_ext.te vendored
View File

@@ -11,3 +11,6 @@ allow hal_wifi_ext lowi_server:unix_dgram_socket sendto;
unix_socket_connect(hal_wifi, vendor_location, vendor_location) unix_socket_connect(hal_wifi, vendor_location, vendor_location)
allow hal_wifi_ext vendor_wifihal_socket:dir rw_dir_perms; allow hal_wifi_ext vendor_wifihal_socket:dir rw_dir_perms;
allow hal_wifi_ext vendor_wifihal_socket:sock_file create_file_perms; allow hal_wifi_ext vendor_wifihal_socket:sock_file create_file_perms;
# allow hal_wifi to write into /proc/debugdriver/driverdump
r_dir_file(hal_wifi_ext, vendor_proc_wifi_dbg);