commit 237626280a02162750092ed977c10e87898447a2
author chenpaul <chenpaul@google.com> Thu Jun 18 11:42:09 2020 +0800
committer Paul Chen <chenpaul@google.com> Fri Jul 10 08:37:17 2020 +0000
tree d96be0df5eef3d7ce34f9decb1e27fc8a9f8f080
parent a1b667e09f8646c3aa9b5f7de4573e6291e310bc

wifi - Add sepolicy to check driver is ready by wifi HAL

06-18 11:58:56.765   984   984 W wifi_ext@1.0-se: type=1400 audit(0.0:6): avc: denied { read } for name="wlan" dev="tmpfs" ino=5815 scontext=u:r:hal_wifi_ext:s0 tcontext=u:object_r:wlan_device:s0 tclass=chr_file permissive=0

Bug: 157090295
Test: Wifi is workable
Change-Id: Iff0b0bc2ff877e0778bbbcef558b164846df40dd

vendor/qcom/common/hal_wifi_ext.te

diff --git a/vendor/qcom/common/hal_wifi_ext.te b/vendor/qcom/common/hal_wifi_ext.te
index e9750ff..3a16e2e 100644
--- a/vendor/qcom/common/hal_wifi_ext.te
+++ b/vendor/qcom/common/hal_wifi_ext.te
@@ -1,4 +1,4 @@
-allow hal_wifi_ext wlan_device:chr_file w_file_perms;
+allow hal_wifi_ext wlan_device:chr_file { w_file_perms read };
 
 # Allow wifi hal access to LOWI
 allow hal_wifi_ext location:unix_stream_socket connectto;