blob: 28ce7101a20c4dc3e81f14420f324cf8c4199639 [file] [log] [blame]
Roshan Piusa483b5d2019-11-22 09:33:37 -08001# Networking service app
Remi NGUYEN VAN5f3ba922018-11-14 17:07:41 +09002typeattribute network_stack coredomain;
3
4app_domain(network_stack);
5net_domain(network_stack);
6
7allow network_stack self:global_capability_class_set {
8 net_admin
9 net_bind_service
10 net_broadcast
11 net_raw
12};
13
14# Allow access to net_admin ioctl, DHCP server uses SIOCSARP
15allowxperm network_stack self:udp_socket ioctl priv_sock_ioctls;
16
17# The DhcpClient uses packet_sockets
18allow network_stack self:packet_socket create_socket_perms_no_ioctl;
19
Remi NGUYEN VAN780fbad2019-01-28 13:08:42 +090020# Monitor neighbors via netlink.
21allow network_stack self:netlink_route_socket nlmsg_write;
22
Remi NGUYEN VANd0f65ce2019-01-11 07:35:17 +090023allow network_stack app_api_service:service_manager find;
Luke Huang524f25e2019-02-25 20:12:15 +080024allow network_stack dnsresolver_service:service_manager find;
Remi NGUYEN VAN5f3ba922018-11-14 17:07:41 +090025allow network_stack netd_service:service_manager find;
Remi NGUYEN VANfd758cb2019-01-15 16:57:32 +090026allow network_stack radio_service:service_manager find;
Xiao Mac06f0f62019-03-08 12:33:03 +090027allow network_stack radio_data_file:dir create_dir_perms;
28allow network_stack radio_data_file:file create_file_perms;
Remi NGUYEN VAN5f3ba922018-11-14 17:07:41 +090029
30binder_call(network_stack, netd);
Roshan Pius1086c7d2019-10-01 13:49:21 -070031
Chiachang Wange0635852019-10-12 20:49:23 +090032# Create/use netlink_tcpdiag_socket to get tcp info
33allow network_stack self:netlink_tcpdiag_socket { create_socket_perms_no_ioctl nlmsg_read nlmsg_write };