diff options
| author | Joel Galenson <jgalenson@google.com> | 2018-04-12 11:02:02 -0700 |
|---|---|---|
| committer | Joel Galenson <jgalenson@google.com> | 2018-04-12 11:03:49 -0700 |
| commit | 82ee41e471025be3d4ce161f2b484481b583abde (patch) | |
| tree | 81d7b3088fb8538d7961f3204c305471815e7f76 | |
| parent | 85b730d2259eb83e7409c0016d2dd1624a3da7e9 (diff) | |
| download | device_google_wahoo-82ee41e471025be3d4ce161f2b484481b583abde.tar.gz device_google_wahoo-82ee41e471025be3d4ce161f2b484481b583abde.tar.bz2 device_google_wahoo-82ee41e471025be3d4ce161f2b484481b583abde.zip | |
Suppress hal_wifi_default module loading denials.
This suppresses the following denials:
avc: denied { module_request } for comm="android.hardwar" kmod="netdev-wlan0" scontext=u:r:hal_wifi_default:s0 tcontext=u:r:kernel:s0 tclass=system
avc: denied { sys_module } for comm="android.hardwar" capability=16 scontext=u:r:hal_wifi_default:s0 tcontext=u:r:hal_wifi_default:s0 tclass=capability
Test: Boot device.
Change-Id: I2eb4789892172cb119f50084cfe9718d8ead647d
| -rw-r--r-- | sepolicy/vendor/hal_wifi_default.te | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/sepolicy/vendor/hal_wifi_default.te b/sepolicy/vendor/hal_wifi_default.te index ca0e8c58..a0155584 100644 --- a/sepolicy/vendor/hal_wifi_default.te +++ b/sepolicy/vendor/hal_wifi_default.te @@ -11,6 +11,9 @@ allow hal_wifi_default wlan_device:chr_file w_file_perms; # Allow wifi hal to read debug info from the driver. r_dir_file(hal_wifi_default, proc_wifi_dbg) +dontaudit hal_wifi_default kernel:system module_request; +dontaudit hal_wifi_default self:capability sys_module; + userdebug_or_eng(` # debugfs entries are only needed in user-debug or eng builds |