Wifi: Add sepolicy files for hal_wifi_ext service

avc denied log:
avc: denied { search } for comm="wifi_ext@1.0-se" name="wifi" dev="dm-43" ino=365 scontext=u:r:hal_wifi_ext:s0 tcontext=u:object_r:updated_wifi_firmware_data_file:s0 tclass=dir permissive=1

Bug: 205779850
Test: pts -m PtsSELinuxTest -t com.google.android.selinux.pts.SELinuxTest
      #scanAvcDeniedLogRightAfterReboot
Change-Id: I0c41193b2b9c6a596f142f02c6fee4665fbf2011
This commit is contained in:
chenpaul 2021-11-10 14:14:53 +08:00 committed by TreeHugger Robot
parent 8e6af6f9ad
commit 1053cee419
2 changed files with 4 additions and 2 deletions

View file

@ -1,2 +0,0 @@
# b/205779850
dontaudit hal_wifi_ext updated_wifi_firmware_data_file:dir { search };

View file

@ -3,3 +3,7 @@ binder_call(hal_wifi_ext, grilservice_app)
# Write wlan driver/fw version into property
set_prop(hal_wifi_ext, vendor_wifi_version)
# Allow wifi_ext to read and write /data/vendor/firmware/wifi
allow hal_wifi_ext updated_wifi_firmware_data_file:dir rw_dir_perms;
allow hal_wifi_ext updated_wifi_firmware_data_file:file create_file_perms;