disallow unprivileged access to rmnet
Enforce via neverallow rule by adding WAN_IOC_ADD_FLT_RULE
and WAN_IOC_ADD_FLT_RULE_INDEX to neverallow macro.
Bug: 26324307
Change-Id: I5350d9339e45ddeefd5423c3fe9a0ea14fe877b2
diff --git a/ioctl_defines b/ioctl_defines
index eafcaff..97bdcc1 100644
--- a/ioctl_defines
+++ b/ioctl_defines
@@ -2631,3 +2631,5 @@
define(`BTRFS_IOC_DEV_INFO', `0xd000941e')
define(`HIDIOCGUSAGES', `0xd01c4813')
define(`SNDRV_COMPRESS_GET_CODEC_CAPS', `0xeb884311')
+define(`WAN_IOC_ADD_FLT_RULE', `0x00006900')
+define(`WAN_IOC_ADD_FLT_INDEX', `0x00006902')
diff --git a/ioctl_macros b/ioctl_macros
index 890fc3c..5a94bf2 100644
--- a/ioctl_macros
+++ b/ioctl_macros
@@ -15,6 +15,8 @@
# socket ioctls never allowed to unprivileged apps
define(`priv_sock_ioctls', `
{
+# qualcomm rmnet ioctls
+WAN_IOC_ADD_FLT_RULE WAN_IOC_ADD_FLT_INDEX
# socket ioctls
SIOCADDRT SIOCDELRT SIOCRTMSG SIOCSIFLINK SIOCSIFFLAGS SIOCSIFADDR SIOCGIFDSTADDR
SIOCSIFDSTADDR SIOCSIFBRDADDR SIOCSIFNETMASK SIOCGIFMETRIC SIOCSIFMETRIC SIOCGIFMEM
