Skip to content
Snippets Groups Projects
Commit 6caeac7b authored by Roshan Pius's avatar Roshan Pius
Browse files

wpa: Add permissions for hwbinder

Modify permissions for wpa_supplicant to use hwbinder (for HIDL),
instead of binder.

Denials:
01-15 14:31:58.573   541   541 W wpa_supplicant: type=1400
audit(0.0:10): avc: denied { call } for scontext=u:r:wpa:s0
tcontext=u:r:hwservicemanager:s0 tclass=binder permissive=0
01-15 14:31:58.573   541   541 W wpa_supplicant: type=1400
audit(0.0:11): avc: denied { call } for scontext=u:r:wpa:s0
tcontext=u:r:hwservicemanager:s0 tclass=binder permissive=0

BUG: 31365276
Test: Compiled and ensured that the selinux denials are no longer
present in logs.

Change-Id: Ifa4630edea6ec5a916b3940f9a03ef9dc6fc9af2
parent 70591fed
No related branches found
No related tags found
No related merge requests found
......@@ -4,10 +4,10 @@ type wificond_exec, exec_type, file_type;
binder_use(wificond)
binder_call(wificond, system_server)
binder_call(wificond, wpa)
hwbinder_use(wificond)
binder_call(wificond, wifi_hal_legacy)
binder_call(wificond, wpa)
allow wificond wificond_service:service_manager { add find };
......
......@@ -21,10 +21,9 @@ allow wpa wifi_data_file:dir create_dir_perms;
allow wpa wifi_data_file:file create_file_perms;
unix_socket_send(wpa, system_wpa, system_server)
# Binder interface exposed by WPA.
binder_use(wpa)
# HIDL interface exposed by WPA.
hwbinder_use(wpa)
binder_call(wpa, wificond)
allow wpa wpa_supplicant_service:service_manager { add find };
# Create a socket for receiving info from wpa
allow wpa wpa_socket:dir create_dir_perms;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment