Skip to content
Snippets Groups Projects
Commit e7cad6cd authored by Joel Galenson's avatar Joel Galenson
Browse files

Hide denial for wpa_supplicant writing to /data/misc/wifi.

It should instead write to /data/vendor/wifi.

Bug: 36645291
Test: Built policy.
Change-Id: Ib7ba3477fbc03ebf07b886c60bcf4a64b954934a
(cherry picked from commit cc9b30a1)
parent 732240b0
No related branches found
No related tags found
No related merge requests found
...@@ -19,3 +19,11 @@ allow hal_wifi_supplicant_default wpa_data_file:sock_file create_file_perms; ...@@ -19,3 +19,11 @@ allow hal_wifi_supplicant_default wpa_data_file:sock_file create_file_perms;
# Write to security logs for audit. # Write to security logs for audit.
get_prop(hal_wifi_supplicant_default, device_logging_prop) get_prop(hal_wifi_supplicant_default, device_logging_prop)
# Devices upgrading to P may grant this permission in device-specific
# policy along with the data_between_core_and_vendor_violators
# attribute needed for an exemption. However, devices that launch with
# P should use /data/vendor/wifi, which is already granted in core
# policy. This is dontaudited here to avoid conditional
# device-specific behavior in wpa_supplicant.
dontaudit hal_wifi_supplicant_default wifi_data_file:dir search;
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment