cm: policy for ipv6 tethering

* Enable use of radish via netd for ipv6 tethering Change-Id: Ifa0e85686fc70f59c089ca40a78cea9935820185
2014-05-11 02:57:57 -07:00 · 2014-05-11 02:57:57 -07:00 · fdf1aff5ad
parent 674bebbd6d
commit fdf1aff5ad
3 changed files with 7 additions and 0 deletions
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@ -6,3 +6,5 @@
 /sys/devices/system/cpu.*/cpufreq(/.*)? --  u:object_r:sysfs_devices_system_cpu:s0
 /sys/block/mmcblk0/queue/scheduler  --    u:object_r:sysfs_writable:s0

+/data/hostapd(/.*)?         u:object_r:wifi_data_file:s0
+/data/misc/radio(/.*)?      u:object_r:radio_data_file:s0
--- a/sepolicy/netd.te
+++ b/sepolicy/netd.te
@ -0,0 +1,4 @@
+allow netd self:capability { setuid sys_module setgid };
+allow netd self:packet_socket create_socket_perms;
+allow netd radio_data_file:dir rw_dir_perms;
+allow netd radio_data_file:file create_file_perms;
--- a/sepolicy/sepolicy.mk
+++ b/sepolicy/sepolicy.mk
@ -13,6 +13,7 @@ BOARD_SEPOLICY_UNION += \
    genfs_contexts \
    seapp_contexts \
    installd.te \
+    netd.te \
    ueventd.te \
    vold.te \
    mac_permissions.xml