summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndroid Build Coastguard Worker <android-build-coastguard-worker@google.com>2022-07-07 23:21:29 +0000
committerAndroid Build Coastguard Worker <android-build-coastguard-worker@google.com>2022-07-07 23:21:29 +0000
commit3b643aaa53b1a6b10954dd53b45c7e8115e60197 (patch)
tree2b24414e5b3cdcd4d484096e2b078033882e6b68
parentbe539f0f35ceed103a0d95cd8c73ed5b126d57ce (diff)
parent128a674db9514a6420b2b703a4edc65aad2b5c06 (diff)
downloadpixel-sepolicy-3b643aaa53b1a6b10954dd53b45c7e8115e60197.tar.gz
Change-Id: I0c230af602bf00102b2a983ccc5b37ee69d681f2
-rw-r--r--wifi_sniffer/property_contexts3
-rw-r--r--wifi_sniffer/wifi_sniffer.te14
2 files changed, 14 insertions, 3 deletions
diff --git a/wifi_sniffer/property_contexts b/wifi_sniffer/property_contexts
index 19f7e76..cb55d65 100644
--- a/wifi_sniffer/property_contexts
+++ b/wifi_sniffer/property_contexts
@@ -1,3 +1,2 @@
-persist.vendor.wifi.sniffer.freq u:object_r:vendor_wifi_sniffer_prop:s0
-persist.vendor.wifi.sniffer.bandwidth u:object_r:vendor_wifi_sniffer_prop:s0
+persist.vendor.wifi.sniffer. u:object_r:vendor_wifi_sniffer_prop:s0
vendor.wifi.sniffer.start u:object_r:vendor_wifi_sniffer_prop:s0
diff --git a/wifi_sniffer/wifi_sniffer.te b/wifi_sniffer/wifi_sniffer.te
index 3c9ad62..977d6da 100644
--- a/wifi_sniffer/wifi_sniffer.te
+++ b/wifi_sniffer/wifi_sniffer.te
@@ -12,7 +12,19 @@ userdebug_or_eng(`
# interface up
allowxperm wifi_sniffer self:udp_socket ioctl SIOCSIFFLAGS;
- allow wifi_sniffer self:netlink_generic_socket create_socket_perms_no_ioctl;
+ allow wifi_sniffer self:netlink_generic_socket create_socket_perms;
+ allowxperm wifi_sniffer self:netlink_generic_socket ioctl { 0x8910 0x8946 };
+
+# tcpdump
+ allow wifi_sniffer self:packet_socket create_socket_perms;
+ allowxperm wifi_sniffer self:packet_socket ioctl { 0x8933 0x8927 };
+ allow wifi_sniffer self:unix_dgram_socket ioctl;
+ allowxperm wifi_sniffer self:unix_dgram_socket ioctl 0x8946;
+ allow wifi_sniffer sysfs_net:dir search;
+ allow wifi_sniffer sysfs_net:file r_file_perms;
+ allow wifi_sniffer tcpdump_exec:file rx_file_perms;
+ allow wifi_sniffer wifi_logging_data_file:file create_file_perms;
+ allow wifi_sniffer wifi_logging_data_file:dir create_dir_perms;
get_prop(wifi_sniffer, vendor_wifi_sniffer_prop)
')