1type wifi_mainline_supplicant, domain, coredomain; 2type wifi_mainline_supplicant_exec, system_file_type, exec_type, file_type; 3 4binder_use(wifi_mainline_supplicant) 5binder_call(wifi_mainline_supplicant, system_server) 6init_daemon_domain(wifi_mainline_supplicant) 7add_service(wifi_mainline_supplicant, wifi_mainline_supplicant_service) 8 9allow wifi_mainline_supplicant self:global_capability_class_set { net_admin net_raw }; 10allow wifi_mainline_supplicant proc_net:file rw_file_perms; 11allow wifi_mainline_supplicant sysfs_net:dir search; 12 13# Allow limited access to the parent directory /data/misc/wifi/ 14allow wifi_mainline_supplicant wifi_data_file:dir { getattr search }; 15 16# Create temporary socket files in /data/misc/wifi/mainline_supplicant/sockets 17allow wifi_mainline_supplicant mainline_supplicant_data_file:dir create_dir_perms; 18allow wifi_mainline_supplicant mainline_supplicant_data_file:file create_file_perms; 19allow wifi_mainline_supplicant mainline_supplicant_data_file:sock_file { create write setattr unlink }; 20 21# UDP sockets 22allow wifi_mainline_supplicant self:udp_socket create_socket_perms; 23allowxperm wifi_mainline_supplicant self:udp_socket ioctl { priv_sock_ioctls SIOCSIFFLAGS SIOCSIFHWADDR }; 24 25# Packet sockets 26allow wifi_mainline_supplicant self:packet_socket create_socket_perms; 27allowxperm wifi_mainline_supplicant self:packet_socket ioctl { unpriv_sock_ioctls priv_sock_ioctls unpriv_tty_ioctls }; 28 29# Netlink sockets 30allow wifi_mainline_supplicant self:netlink_route_socket { bind create read write nlmsg_readpriv nlmsg_write }; 31allow wifi_mainline_supplicant self:netlink_socket create_socket_perms_no_ioctl; 32allow wifi_mainline_supplicant self:netlink_generic_socket create_socket_perms_no_ioctl; 33 34# Dumpstate support 35allow wifi_mainline_supplicant dumpstate:fd use; 36allow wifi_mainline_supplicant dumpstate:fifo_file write; 37