1# HwBinder IPC from client to server 2binder_call(hal_wifi_hostapd_client, hal_wifi_hostapd_server) 3binder_call(hal_wifi_hostapd_server, hal_wifi_hostapd_client) 4 5hal_attribute_hwservice(hal_wifi_hostapd, hal_wifi_hostapd_hwservice) 6 7allow hal_wifi_hostapd_server self:global_capability_class_set { net_admin net_raw }; 8 9allow hal_wifi_hostapd_server sysfs_net:dir search; 10 11# Allow hal_wifi_hostapd to access /proc/net/psched 12allow hal_wifi_hostapd_server proc_net_type:file { getattr open read }; 13 14# Various socket permissions. 15allowxperm hal_wifi_hostapd_server self:udp_socket ioctl priv_sock_ioctls; 16allow hal_wifi_hostapd_server self:netlink_socket create_socket_perms_no_ioctl; 17allow hal_wifi_hostapd_server self:netlink_generic_socket create_socket_perms_no_ioctl; 18allow hal_wifi_hostapd_server self:packet_socket create_socket_perms_no_ioctl; 19allow hal_wifi_hostapd_server self:netlink_route_socket nlmsg_write; 20 21### 22### neverallow rules 23### 24 25# hal_wifi_hostapd should not trust any data from sdcards 26neverallow hal_wifi_hostapd_server sdcard_type:dir ~getattr; 27neverallow hal_wifi_hostapd_server sdcard_type:file *; 28