Home | History | Annotate | Download | only in sepolicy
      1 # wifi connection service
      2 type conn_init, domain;
      3 type conn_init_exec, exec_type, file_type;
      4 
      5 init_daemon_domain(conn_init)
      6 
      7 # Runs init.flo.wifi.sh
      8 allow conn_init shell_exec:file { entrypoint read };
      9 allow conn_init conn_init_exec:file rx_file_perms;
     10 
     11 # Allow /persist/wifi access
     12 allow conn_init { persist_file persist_wifi_file }:dir search;
     13 allow conn_init persist_wifi_file:file r_file_perms;
     14 
     15 # Allow /data/misc/wifi access for firmware files
     16 allow conn_init wifi_data_file:dir w_dir_perms;
     17 allow conn_init wifi_data_file:file create_file_perms;
     18 
     19 allow conn_init wlan_device:chr_file rw_file_perms;
     20 
     21 # init.flo.wifi.sh runs toolbox
     22 allow conn_init system_file:file execute_no_trans;
     23