sepolicy: partial hostap denials fix

This commit is contained in:
Mister Oyster 2017-09-10 12:30:30 +02:00
parent 3629edfad6
commit c50b03a964
4 changed files with 12 additions and 0 deletions

2
sepolicy/hostapd.te Normal file
View File

@ -0,0 +1,2 @@
# wlan0 hostap
allow hostapd wifi_data_file:sock_file write;

View File

@ -2,3 +2,8 @@
allow netd wmtWifi_device:chr_file w_file_perms;
allow netd self:capability sys_module;
# wlan0 hostap
allow netd dhcp_data_file:dir setattr;
allow netd wifi_data_file:dir { setattr create };
allow netd wifi_data_file:sock_file { setattr create unlink };

View File

@ -22,3 +22,6 @@ allow system_server debugfs:dir r_file_perms;
# Guiext
allow system_server guiext-server_service:service_manager find;
# wlan0 hostap
allow system_server wifi_data_file:sock_file unlink;

2
sepolicy/wpa.te Normal file
View File

@ -0,0 +1,2 @@
# wlan0 hostap
allow wpa wifi_data_file:sock_file { setattr create write unlink };