diff --git a/private/hwservice_contexts b/private/hwservice_contexts index 397a3b165edd4abe50e6263714d46916e0bcdeda..3cc6b1f906702ef644f904f01317746d8afdc11f 100644 --- a/private/hwservice_contexts +++ b/private/hwservice_contexts @@ -49,5 +49,6 @@ android.hidl.base::IBase u:object_r:hidl_ android.hidl.manager::IServiceManager u:object_r:hidl_manager_hwservice:s0 android.hidl.memory::IMapper u:object_r:hidl_memory_hwservice:s0 android.hidl.token::ITokenManager u:object_r:hidl_token_hwservice:s0 +android.system.net.netd::INetd u:object_r:system_net_netd_hwservice:s0 android.system.wifi.keystore::IKeystore u:object_r:system_wifi_keystore_hwservice:s0 * u:object_r:default_android_hwservice:s0 diff --git a/public/hwservice.te b/public/hwservice.te index bb2c668d7d699ab34f3e1d58164a3fe76573217d..3d9f095d150fdf1e77872f31dc52d890cb781ff1 100644 --- a/public/hwservice.te +++ b/public/hwservice.te @@ -44,4 +44,5 @@ type hidl_base_hwservice, hwservice_manager_type; type hidl_manager_hwservice, hwservice_manager_type, coredomain_hwservice; type hidl_memory_hwservice, hwservice_manager_type, coredomain_hwservice; type hidl_token_hwservice, hwservice_manager_type, coredomain_hwservice; +type system_net_netd_hwservice, hwservice_manager_type, coredomain_hwservice; type system_wifi_keystore_hwservice, hwservice_manager_type, coredomain_hwservice; diff --git a/public/netd.te b/public/netd.te index 11e0e5cba8449c44df519ccce776c4cddbe6ee05..aa99da21a8a61f3a4b74309469d42f14568aeb34 100644 --- a/public/netd.te +++ b/public/netd.te @@ -91,6 +91,11 @@ allow netd netdomain:fd use; # give netd permission to read and write netlink xfrm allow netd self:netlink_xfrm_socket { create_socket_perms_no_ioctl nlmsg_write nlmsg_read }; +# Allow netd to register as hal server. +add_hwservice(netd, system_net_netd_hwservice) +hwbinder_use(netd) +get_prop(netd, hwservicemanager_prop) + ### ### Neverallow rules ###