sepolicy/conn_init.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

# wifi connection service
type conn_init, domain;
type conn_init_exec, exec_type, file_type;

init_daemon_domain(conn_init)

# Runs init.mako.wifi.sh
allow conn_init shell_exec:file { entrypoint read };
allow conn_init conn_init_exec:file rx_file_perms;

# Allow /persist/wifi access
allow conn_init { persist_file persist_wifi_file }:dir search;
allow conn_init persist_wifi_file:file r_file_perms;

# Allow /data/misc/wifi access for firmware files
allow conn_init wifi_data_file:dir w_dir_perms;
allow conn_init wifi_data_file:file create_file_perms;

allow conn_init wlan_device:chr_file rw_file_perms;

# init.mako.wifi.sh runs toolbox
allow conn_init system_file:file execute_no_trans;
allow conn_init toolbox_exec:file rx_file_perms;