commit 25024901781db197880fc398e43c76008ecde524
author Christopher Wiley <wiley@google.com> Tue Jul 12 14:30:21 2016 -0700
committer Christopher Wiley <wiley@google.com> Tue Jul 12 14:53:23 2016 -0700
tree dbc4b3a1e50c02e534f10df95413611fe45ea5ac
parent 1d305fb16ac72311609c7afa02c737accfac5b6c

Tag hostapd binary with CAP_NET_ADMIN | CAP_NET_RAW

Bug: 30041118
Change-Id: I14d1fd601fc4bce12c563a2004e91bd8ba0f42c3
Test: hostapd can start as the wifi user with these capabilities.

libcutils/fs_config.c

diff --git a/libcutils/fs_config.c b/libcutils/fs_config.c
index 08db7dc..e681718 100644
--- a/libcutils/fs_config.c
+++ b/libcutils/fs_config.c
@@ -145,6 +145,10 @@
     /* Support FIFO scheduling mode in SurfaceFlinger. */
     { 00755, AID_SYSTEM,    AID_GRAPHICS,     CAP_MASK_LONG(CAP_SYS_NICE), "system/bin/surfaceflinger" },
 
+    /* Support hostapd administering a network interface. */
+    { 00755, AID_WIFI,      AID_WIFI,     CAP_MASK_LONG(CAP_NET_ADMIN) |
+                                          CAP_MASK_LONG(CAP_NET_RAW),    "system/bin/hostapd" },
+
     { 00750, AID_ROOT,      AID_ROOT,      0, "system/bin/uncrypt" },
     { 00750, AID_ROOT,      AID_ROOT,      0, "system/bin/install-recovery.sh" },
     { 00755, AID_ROOT,      AID_SHELL,     0, "system/bin/*" },