Files
device_google_wahoo/sepolicy/hal_wifi.te
Roshan Pius 98da724c36 hal_wifi: Allow wifi hal to access /proc/debug
This is needed for fetching debug info from the wifi driver.

Denials:
03-10 19:16:58.207   452   452 W android.hardwar: type=1400
audit(0.0:319): avc: denied { read } for name="fwdump" dev="proc"
ino=4026547172 scontext=u:r:hal_wifi_default:s0
tcontext=u:object_r:proc:s0 tclass=file permissive=0
03-10 19:16:58.207   452   452 W android.hardwar: type=1400
audit(0.0:320): avc: denied { read } for name="driverdump" dev="proc"
ino=4026547174 scontext=u:r:hal_wifi_default:s0
tcontext=u:object_r:proc:s0 tclass=file permissive=0

03-10 19:16:58.209   452   452 I WifiHAL : handleResponse: Memory Dump
size: 327680
03-10 19:16:58.209   452   452 E WifiHAL : Failed to open
/proc/debug/fwdump file
03-10 19:16:58.209   452   452 V WifiHAL : Successfully removed event
handler for vendor 0x1374
03-10 19:16:58.210   452   452 E WifiHAL : Failed to open
/proc/debugdriver/driverdump file

BUG: 36126608
Test: Device boots up and the denials no longer seen.
Change-Id: Id3789f4ceeb90c36df14989e6d5d9dc09f9bf558
2017-03-13 15:26:45 -07:00

11 lines
398 B
Plaintext

# Allow wifi hal access to LOWI
allow hal_wifi location:unix_stream_socket connectto;
allow hal_wifi location_data_file:sock_file write;
# write to files owned by location daemon
allow hal_wifi location_data_file:dir create_dir_perms;
allow hal_wifi location_data_file:{ file fifo_file } create_file_perms;
# Allow wifi hal to read debug info from the driver.
r_dir_file(hal_wifi, proc_wifi_dbg)