• Nick Kralevich's avatar
    Enable SELinux protections for netd. · dbd28d91
    Nick Kralevich authored
    This change does several things:
    
    1) Restore domain.te to the version present at
    cd516a32 . This is the version
    currently being distributed in AOSP.
    
    2) Add "allow domain properties_device:file r_file_perms;" to
    domain.te, to allow all domains to read /dev/__properties__ .
    This change was missing from AOSP.
    
    3) Restore netd.te to the version present at
    80c9ba52 . This is the version
    currently being distributed in AOSP.
    
    4) Remove anything involving module loading from netd.te. CTS
    enforces that Android kernels can't have module loading enabled.
    
    5) Add several new capabilities, plus data file rules, to
    netd.te, since netd needs to write to files owned by wifi.
    
    6) Add a new unconfined domain called dnsmasq.te, and allow
    transitions from netd to that domain. Over time, we'll tighten up
    the dnsmasq.te domain.
    
    7) Add a new unconfined domain called hostapd.te, and allow
    transitions from netd to that domain. O...
    dbd28d91
hostapd.te 159 Bytes