wifi - Add sepolicy for hal_wifi_ext
Allow wifi hal to access wlan debugfs directories
in userdebug build and eng builds
Bug: 170190081
Test: boot with no wifi_ext denial found
Change-Id: Iea62df2dbdd8126fd5a1f3ac0bf0832df5a36bbc
diff --git a/vendor/google/hal_wifi_ext.te b/vendor/google/hal_wifi_ext.te
index c4f17fb..880f944 100644
--- a/vendor/google/hal_wifi_ext.te
+++ b/vendor/google/hal_wifi_ext.te
@@ -36,3 +36,10 @@
# Allow wifi_ext to read the updated firmware files from app
allow hal_wifi_ext priv_app:fd use;
allow hal_wifi_ext privapp_data_file:file { read map };
+
+userdebug_or_eng(`
+# debugfs entries are only needed in user-debug or eng builds
+
+# Allow wifi hal to access wlan debugfs directories
+allow hal_wifi_ext debugfs_wlan:dir r_dir_perms;
+')
