b4s4: Update sepolicy to allow the wifi_ext AIDL service.

Changes should be similar to aosp/2261345. Bug: 205044134 Test: m + Pre-submit tests Change-Id: Iafef00b87b3b0b6d165d4c375bcbc85c228864b1
Oneloutre · Mar 20, 2024 · 29070f9 · 29070f9
1 parent 6ee383b
commit 29070f9
Show file tree

Hide file tree

Showing 6 changed files with 7 additions and 0 deletions.
diff --git a/sepolicy/vendor/google/file_contexts b/sepolicy/vendor/google/file_contexts
@@ -17,6 +17,8 @@
 /vendor/bin/init\.ramoops\.sh                                               u:object_r:ramoops_exec:s0
 /vendor/bin/hw/vendor\.google\.wifi_ext@1\.0-service-vendor                 u:object_r:hal_wifi_ext_exec:s0
 /vendor/bin/hw/vendor\.google\.wifi_ext@1\.0-service-vendor-lazy            u:object_r:hal_wifi_ext_exec:s0
+/vendor/bin/hw/vendor\.google\.wifi_ext-service-vendor                      u:object_r:hal_wifi_ext_exec:s0
+/vendor/bin/hw/vendor\.google\.wifi_ext-service-vendor-lazy                 u:object_r:hal_wifi_ext_exec:s0
 
 /data/vendor_ce/[0-9]+/ramoops(/.*)?                                        u:object_r:ramoops_vendor_data_file:s0
 

diff --git a/sepolicy/vendor/google/grilservice_app.te b/sepolicy/vendor/google/grilservice_app.te
@@ -4,6 +4,7 @@ app_domain(grilservice_app)
 
 allow grilservice_app hal_radioext_hwservice:hwservice_manager find;
 allow grilservice_app hal_wifi_ext_hwservice:hwservice_manager find;
+allow grilservice_app hal_wifi_ext_service:service_manager find;
 allow grilservice_app app_api_service:service_manager find;
 allow grilservice_app hal_bluetooth_sar_hwservice:hwservice_manager find;
 

diff --git a/sepolicy/vendor/google/hal_radioext_default.te b/sepolicy/vendor/google/hal_radioext_default.te
@@ -17,6 +17,7 @@ allow hal_radioext_default sysfs_soc:file r_file_perms;
 allowxperm hal_radioext_default self:socket ioctl msm_sock_ipc_ioctls;
 
 allow hal_radioext_default hal_wifi_ext_hwservice:hwservice_manager find;
+allow hal_radioext_default hal_wifi_ext_service:service_manager find;
 allow hal_radioext_default hal_wifi_ext:binder call;
 
 userdebug_or_eng(`

diff --git a/sepolicy/vendor/google/hal_wifi_ext.te b/sepolicy/vendor/google/hal_wifi_ext.te
@@ -6,3 +6,4 @@ init_daemon_domain(hal_wifi_ext)
 
 # Allow to start the IWifi:wifi_ext service
 add_hwservice(hal_wifi_ext, hal_wifi_ext_hwservice);
+add_service(hal_wifi_ext, hal_wifi_ext_service)
diff --git a/sepolicy/vendor/google/service.te b/sepolicy/vendor/google/service.te
@@ -0,0 +1 @@
+type hal_wifi_ext_service, service_manager_type, hal_service_type;
diff --git a/sepolicy/vendor/google/service_contexts b/sepolicy/vendor/google/service_contexts
@@ -0,0 +1 @@
+vendor.google.wifi_ext.IWifiExt/default                                       u:object_r:hal_wifi_ext_service:s0
Original file line number	Diff line number	Diff line change
Expand Up		@@ -6,3 +6,4 @@ init_daemon_domain(hal_wifi_ext)

		# Allow to start the IWifi:wifi_ext service
		add_hwservice(hal_wifi_ext, hal_wifi_ext_hwservice);
		add_service(hal_wifi_ext, hal_wifi_ext_service)
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		type hal_wifi_ext_service, service_manager_type, hal_service_type;
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		vendor.google.wifi_ext.IWifiExt/default u:object_r:hal_wifi_ext_service:s0