| Subash Abhinov Kasiviswanathan | 2c3fed3 | 2014-03-12 17:13:13 -0600 | [diff] [blame] | 1 | #Policies for IPv6 tethering |
| 2 | allow netd netd:capability { setgid setuid }; |
| Biswajit Paul | 64f83f6 | 2014-10-13 14:36:16 -0700 | [diff] [blame] | 3 | dontaudit netd self:capability sys_module; |
| Bryse Flowers | 31f25fc | 2016-05-21 19:00:49 -0700 | [diff] [blame^] | 4 | binder_use(netd); |
| 5 | allow netd qtitetherservice_service:service_manager find; |
| Ravi Kumar Siddojigari | 91ffd84 | 2014-10-15 17:38:15 +0530 | [diff] [blame] | 6 | |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 7 | allow netd netd:packet_socket create_socket_perms; |
| 8 | |
| Boxiang Pan | bd05645 | 2014-10-31 18:01:46 -0700 | [diff] [blame] | 9 | unix_socket_connect(netd, cnd, cnd) |
| Manu Prasad | 6b869a8 | 2014-12-05 18:53:01 +0530 | [diff] [blame] | 10 | |
| 11 | allow netd wfdservice:fd use; |
| 12 | allow netd wfdservice:tcp_socket rw_socket_perms; |
| Ravinder Konka | bbe6073 | 2015-05-27 17:18:26 +0530 | [diff] [blame] | 13 | |
| 14 | # allow to read /data/misc/ipa/tether_stats file |
| 15 | allow netd ipacm_data_file:dir r_dir_perms; |
| 16 | allow netd ipacm_data_file:file r_file_perms; |
| Hamad Kadmany | 567ffc7 | 2015-08-27 15:36:39 +0300 | [diff] [blame] | 17 | |
| Ashwanth Goli | ad2c7ef | 2016-06-03 12:55:06 +0530 | [diff] [blame] | 18 | #allow netd to use privileged sock ioctls |
| 19 | allowxperm netd self: { unix_stream_socket } ioctl priv_sock_ioctls; |
| 20 | |
| Hamad Kadmany | 567ffc7 | 2015-08-27 15:36:39 +0300 | [diff] [blame] | 21 | # needed for netd to start FST Manager via system property |
| 22 | allow netd netd_prop:property_service set; |
| Sravanthi Palakonda | 7e92d04 | 2015-11-06 16:56:06 +0530 | [diff] [blame] | 23 | |
| 24 | allow netd self:capability fsetid; |
| 25 | allow netd hostapd:unix_dgram_socket sendto; |
| 26 | |
| 27 | # Allow netd to chmod dir /data/misc/dhcp |
| 28 | allow netd dhcp_data_file:dir create_dir_perms; |
| 29 | |
| 30 | type_transition netd wifi_data_file:dir wpa_socket "sockets"; |
| 31 | allow netd wpa_socket:dir create_dir_perms; |
| 32 | allow netd wpa_socket:sock_file create_file_perms; |