platform_system_sepolicy/ioctl_macros

# socket ioctls allowed to unprivileged apps
define(`unpriv_sock_ioctls', `
{
# all socket ioctls except the Mac address SIOCGIFHWADDR 0x8927
0x8900-0x8926 0x8928-0x89ff
# all wireless extensions ioctls except get/set essid
# IOCSIWESSID 0x8B1A SIOCGIWESSID 0x8B1B
0x8B00-0x8B09 0x8B1C-0x8BFF
# commonly used TTY ioctls
0x5411 0x5451
}')
restrict app access to socket ioctls Create a macro of unprivileged ioctls including - All common socket ioctls except MAC address - All wireless extensions ioctls except get/set ESSID - Some commonly used tty ioctls Bug: 21657002 Change-Id: Ib08be9cb70d08c1fa2c8bddbae519e7c2df5293c 2015-06-06 00:28:55 +02:00			`# socket ioctls allowed to unprivileged apps`
			define(`unpriv_sock_ioctls', `
			`{`
			`# all socket ioctls except the Mac address SIOCGIFHWADDR 0x8927`
			`0x8900-0x8926 0x8928-0x89ff`
			`# all wireless extensions ioctls except get/set essid`
			`# IOCSIWESSID 0x8B1A SIOCGIWESSID 0x8B1B`
Revert "Migrate to upstream policy version 30" This reverts commit 2ea23a6e1ade883ba81f58b364109c4da94ba584. Change-Id: I5e9efa56d74ab22030611cab515e050e0bb77aca 2015-12-08 19:15:14 +01:00			`0x8B00-0x8B09 0x8B1C-0x8BFF`
restrict app access to socket ioctls Create a macro of unprivileged ioctls including - All common socket ioctls except MAC address - All wireless extensions ioctls except get/set ESSID - Some commonly used tty ioctls Bug: 21657002 Change-Id: Ib08be9cb70d08c1fa2c8bddbae519e7c2df5293c 2015-06-06 00:28:55 +02:00			`# commonly used TTY ioctls`
			`0x5411 0x5451`
			`}')`