Skip to content
Snippets Groups Projects
Commit f83da142 authored by Christopher Wiley's avatar Christopher Wiley
Browse files

Allow wificond to write wifi component config files

We need the ability to set file permissions, create files, write
files, chown files.

Test: integration tests that start/stop hostapd and write its config
      file via wificond pass without SELinux denials.
Bug: 30040724

Change-Id: Iee15fb36a6a4a89009d4b45281060379d70cd53c
parent ab1976d1
Branches
Tags
No related merge requests found
......@@ -20,3 +20,11 @@ allow wificond self:capability { net_admin net_raw };
allow wificond self:netlink_socket create_socket_perms_no_ioctl;
r_dir_file(wificond, proc_net)
# wificond writes out configuration files for wpa_supplicant/hostapd.
allow wificond wifi_data_file:dir rw_dir_perms;
allow wificond wifi_data_file:file create_file_perms;
# TODO: Remove fowner when wificond runs as the wifi user b/29870863
# We need this today, because we need to chmod hostapd/supplicant
# files, which are owned by system or wifi (not wificond's root).
allow wificond self:capability { chown fowner };
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment