| Subash Abhinov Kasiviswanathan | 2c3fed3 | 2014-03-12 17:13:13 -0600 | [diff] [blame] | 1 | #Policies for IPv6 tethering |
| 2 | allow netd netd:capability { setgid setuid }; |
| Biswajit Paul | 64f83f6 | 2014-10-13 14:36:16 -0700 | [diff] [blame] | 3 | dontaudit netd self:capability sys_module; |
| Bryse Flowers | 31f25fc | 2016-05-21 19:00:49 -0700 | [diff] [blame] | 4 | binder_use(netd); |
| 5 | allow netd qtitetherservice_service:service_manager find; |
| Ravi Kumar Siddojigari | 91ffd84 | 2014-10-15 17:38:15 +0530 | [diff] [blame] | 6 | |
| Biswajit Paul | 2d35d98 | 2017-02-01 17:40:10 -0800 | [diff] [blame] | 7 | allow netd netd:packet_socket create_socket_perms_no_ioctl; |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 8 | |
| Ravi Kumar Siddojigari | c7def12 | 2017-06-13 00:49:19 +0530 | [diff] [blame] | 9 | #unix_socket_connect(netd, cnd, cnd) |
| Manu Prasad | 6b869a8 | 2014-12-05 18:53:01 +0530 | [diff] [blame] | 10 | |
| 11 | allow netd wfdservice:fd use; |
| Ravi Kumar Siddojigari | c7def12 | 2017-06-13 00:49:19 +0530 | [diff] [blame] | 12 | #allow netd wfdservice:tcp_socket rw_socket_perms; |
| Deepak Kushwah | f9d0b75 | 2017-07-26 15:14:12 +0530 | [diff] [blame] | 13 | hal_client_domain(netd, wifidisplayhalservice); |
| Ravinder Konka | bbe6073 | 2015-05-27 17:18:26 +0530 | [diff] [blame] | 14 | |
| 15 | # allow to read /data/misc/ipa/tether_stats file |
| 16 | allow netd ipacm_data_file:dir r_dir_perms; |
| 17 | allow netd ipacm_data_file:file r_file_perms; |
| Hamad Kadmany | 567ffc7 | 2015-08-27 15:36:39 +0300 | [diff] [blame] | 18 | |
| Ashwanth Goli | ad2c7ef | 2016-06-03 12:55:06 +0530 | [diff] [blame] | 19 | #allow netd to use privileged sock ioctls |
| 20 | allowxperm netd self: { unix_stream_socket } ioctl priv_sock_ioctls; |
| 21 | |
| Hamad Kadmany | 567ffc7 | 2015-08-27 15:36:39 +0300 | [diff] [blame] | 22 | # needed for netd to start FST Manager via system property |
| 23 | allow netd netd_prop:property_service set; |
| Sravanthi Palakonda | 7e92d04 | 2015-11-06 16:56:06 +0530 | [diff] [blame] | 24 | |
| 25 | allow netd self:capability fsetid; |
| Ravi Kumar Siddojigari | c7def12 | 2017-06-13 00:49:19 +0530 | [diff] [blame] | 26 | #allow netd hostapd:unix_dgram_socket sendto; |
| Sravanthi Palakonda | 7e92d04 | 2015-11-06 16:56:06 +0530 | [diff] [blame] | 27 | |
| 28 | # Allow netd to chmod dir /data/misc/dhcp |
| 29 | allow netd dhcp_data_file:dir create_dir_perms; |
| 30 | |
| 31 | type_transition netd wifi_data_file:dir wpa_socket "sockets"; |
| 32 | allow netd wpa_socket:dir create_dir_perms; |
| Ravi Kumar Siddojigari | c7def12 | 2017-06-13 00:49:19 +0530 | [diff] [blame] | 33 | #allow netd wpa_socket:sock_file create_file_perms; |