1# Copyright (c) 2022 Huawei Device Co., Ltd. 2# Licensed under the Apache License, Version 2.0 (the "License"); 3# you may not use this file except in compliance with the License. 4# You may obtain a copy of the License at 5# 6# http://www.apache.org/licenses/LICENSE-2.0 7# 8# Unless required by applicable law or agreed to in writing, software 9# distributed under the License is distributed on an "AS IS" BASIS, 10# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 11# See the License for the specific language governing permissions and 12# limitations under the License. 13 14allow wifi_hal_service data_file:dir { search }; 15allow wifi_hal_service data_log:file { read write }; 16allow wifi_hal_service data_service_el1_file:dir { add_name getattr remove_name search write }; 17allow wifi_hal_service data_service_el1_file:file { create read write open getattr ioctl rename }; 18allow wifi_hal_service data_service_el1_file:sock_file { create unlink }; 19allow wifi_hal_service dev_mgr_file:chr_file { getattr }; 20allow wifi_hal_service dev_unix_socket:dir { search }; 21allow wifi_hal_service dev_unix_socket:sock_file { write }; 22allow wifi_hal_service faultloggerd:fd { use }; 23allow wifi_hal_service faultloggerd:unix_stream_socket { connectto }; 24allow wifi_hal_service hiview:binder { call }; 25allow wifi_hal_service kernel:system { module_request }; 26allow wifi_hal_service node:udp_socket { node_bind }; 27allow wifi_hal_service port:udp_socket { name_bind }; 28allow wifi_hal_service sh_exec:file { execute execute_no_trans map read open }; 29allow wifi_hal_service system_bin_file:dir { search }; 30allow wifi_hal_service system_bin_file:file { execute execute_no_trans getattr map read open }; 31allow wifi_hal_service system_bin_file:lnk_file { read }; 32allow wifi_hal_service tty_device:chr_file { open read write }; 33allow wifi_hal_service vendor_etc_file:dir { search }; 34allow wifi_hal_service vendor_etc_file:file { open read }; 35allow wifi_hal_service vendor_lib_file:dir { search }; 36allow wifi_hal_service vendor_lib_file:file { execute getattr map open read }; 37allow wifi_hal_service wifi_hal_service:capability { net_admin net_raw }; 38allow wifi_hal_service wifi_hal_service_exec:file { entrypoint execute map read }; 39allow wifi_hal_service wifi_hal_service:netlink_generic_socket { bind create getattr read setopt write }; 40allow wifi_hal_service wifi_hal_service:netlink_route_socket { bind create nlmsg_write read write }; 41allow wifi_hal_service wifi_hal_service:packet_socket { bind create ioctl read setopt write }; 42allow wifi_hal_service wifi_hal_service:udp_socket { bind connect create ioctl read write }; 43allow wifi_hal_service wifi_hal_service:unix_dgram_socket { ioctl }; 44allow wifi_hal_service wifi_manager_service:dir { search }; 45allow wifi_hal_service wifi_manager_service:file { open read }; 46allow wifi_hal_service wifi_manager_service:process { signal }; 47allow wifi_hal_service data_service_file:dir { search }; 48allow wifi_hal_service sa_cert_manager_service:samgr_class { get }; 49allow wifi_hal_service cert_manager_service:binder { call }; 50allowxperm wifi_hal_service wifi_hal_service:packet_socket ioctl { 0x8927 0x8933 }; 51allowxperm wifi_hal_service wifi_hal_service:udp_socket ioctl { 0x8913 0x8914 0x8915 0x8927 }; 52allowxperm wifi_hal_service wifi_hal_service:unix_dgram_socket ioctl { 0x8933 }; 53 54