aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorStephen Smalley <sds@tycho.nsa.gov>2014-02-11 10:44:21 -0500
committerStephen Smalley <sds@tycho.nsa.gov>2014-02-11 10:50:07 -0500
commitf20673712b07f585de0cd6e6e8f542e866ad54bc (patch)
tree13c093f155bf4a3054f849a344e43feb19e8772e
parente21871c8b7250f5dfc746298ab170a869e6be94d (diff)
downloadandroid_external_sepolicy-f20673712b07f585de0cd6e6e8f542e866ad54bc.tar.gz
android_external_sepolicy-f20673712b07f585de0cd6e6e8f542e866ad54bc.tar.bz2
android_external_sepolicy-f20673712b07f585de0cd6e6e8f542e866ad54bc.zip
Update hostapd domain for /data/misc/wifi/sockets label change.
Change I9e35cc93abf89ce3594860aa3193f84a3b42ea6e changed the type on /data/misc/wifi/sockets to wpa_socket and change I51b09c5e40946673a38732ea9f601b2d047d3b62 fixed the type on existing devices. Consequently hostapd now needs access to wpa_socket dir and sock_file. Change-Id: I58f552b3cd55821f57e6ef33ebe6bb8587e7b3fd Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
-rw-r--r--hostapd.te4
1 files changed, 2 insertions, 2 deletions
diff --git a/hostapd.te b/hostapd.te
index efa3a8d..a5ed62a 100644
--- a/hostapd.te
+++ b/hostapd.te
@@ -11,8 +11,8 @@ allow hostapd self:udp_socket { create ioctl };
allow hostapd wifi_data_file:file rw_file_perms;
allow hostapd wifi_data_file:dir create_dir_perms;
-allow hostapd wifi_data_file:sock_file { create setattr write unlink };
-
+allow hostapd wpa_socket:dir create_dir_perms;
+allow hostapd wpa_socket:sock_file create_file_perms;
allow hostapd netd:fd use;
allow hostapd netd:udp_socket { read write };
allow hostapd netd:netlink_kobject_uevent_socket { read write };