780fbadf08
Allow netd to send network events to the NetworkStack, and allow the NetworkStack to interact with netlink_route_socket for neighbor monitoring. Test: built, booted, WiFi works, no more violations Bug: 112869080 Change-Id: If212b2897e37e9d249f81ba8139461bce461528e
27 lines
776 B
Text
27 lines
776 B
Text
# Networking service app
|
|
typeattribute network_stack coredomain;
|
|
|
|
app_domain(network_stack);
|
|
net_domain(network_stack);
|
|
|
|
allow network_stack self:global_capability_class_set {
|
|
net_admin
|
|
net_bind_service
|
|
net_broadcast
|
|
net_raw
|
|
};
|
|
|
|
# Allow access to net_admin ioctl, DHCP server uses SIOCSARP
|
|
allowxperm network_stack self:udp_socket ioctl priv_sock_ioctls;
|
|
|
|
# The DhcpClient uses packet_sockets
|
|
allow network_stack self:packet_socket create_socket_perms_no_ioctl;
|
|
|
|
# Monitor neighbors via netlink.
|
|
allow network_stack self:netlink_route_socket nlmsg_write;
|
|
|
|
allow network_stack app_api_service:service_manager find;
|
|
allow network_stack netd_service:service_manager find;
|
|
allow network_stack radio_service:service_manager find;
|
|
|
|
binder_call(network_stack, netd);
|