tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Hide denial for wpa_supplicant writing to /data/misc/wifi." am: 1356a75fd5

Browse source 
am: 32c46c19eb

Change-Id: Ifd8cf3b5d9ee3f9ca7a713cd722de90bbe341fb2
This commit is contained in:
Joel Galenson 2018-03-12 20:34:11 +00:00 committed by android-build-merger
commit 90b3b4c3e0
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
vendor/hal_wifi_supplicant_default.te vendored
View file

@ -19,3 +19,11 @@ allow hal_wifi_supplicant_default wpa_data_file:sock_file create_file_perms;
# Write to security logs for audit.
get_prop(hal_wifi_supplicant_default, device_logging_prop)
# Devices upgrading to P may grant this permission in device-specific
# policy along with the data_between_core_and_vendor_violators
# attribute needed for an exemption. However, devices that launch with
# P should use /data/vendor/wifi, which is already granted in core
# policy. This is dontaudited here to avoid conditional
# device-specific behavior in wpa_supplicant.
dontaudit hal_wifi_supplicant_default wifi_data_file:dir search;