From 71fb20be4060fdc365f17b7cd4af0bcead91a29b Mon Sep 17 00:00:00 2001
From: Christopher Wiley <wiley@google.com>
Date: Fri, 1 Jul 2016 15:52:35 -0700
Subject: [PATCH] Allow system_server to call wificond via Binder

WifiStateMachin: type=1400 audit(0.0:24): avc: denied { call } for
scontext=u:r:system_server:s0 tcontext=u:r:wificond:s0 tclass=binder
permissive=0

Bug: 29607308
Test: Above denial disapears

Change-Id: I9b5cfe414683991ffb6308eea612ca6750f1b8ec
---
 system_server.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/system_server.te b/system_server.te
index a50abe661..71a45cde9 100644
--- a/system_server.te
+++ b/system_server.te
@@ -149,6 +149,7 @@ binder_call(system_server, fingerprintd)
 binder_call(system_server, { appdomain autoplay_app })
 binder_call(system_server, dumpstate)
 binder_call(system_server, netd)
+binder_call(system_server, wificond)
 binder_service(system_server)
 
 # Ask debuggerd to dump backtraces for native stacks of interest.
-- 
GitLab