| Remi NGUYEN VAN | 5f3ba92 | 2018-11-14 17:07:41 +0900 | [diff] [blame] | 1 | # Networking service app |
| 2 | typeattribute network_stack coredomain; |
| 3 | |
| 4 | app_domain(network_stack); |
| 5 | net_domain(network_stack); |
| 6 | |
| 7 | allow network_stack self:global_capability_class_set { |
| 8 | net_admin |
| 9 | net_bind_service |
| 10 | net_broadcast |
| 11 | net_raw |
| 12 | }; |
| 13 | |
| 14 | # Allow access to net_admin ioctl, DHCP server uses SIOCSARP |
| 15 | allowxperm network_stack self:udp_socket ioctl priv_sock_ioctls; |
| 16 | |
| 17 | # The DhcpClient uses packet_sockets |
| 18 | allow network_stack self:packet_socket create_socket_perms_no_ioctl; |
| 19 | |
| 20 | allow network_stack activity_service:service_manager find; |
| 21 | allow network_stack netd_service:service_manager find; |
| 22 | allow network_stack wifi_service:service_manager find; |
| 23 | allow network_stack connmetrics_service:service_manager find; |
| 24 | |
| 25 | binder_call(network_stack, netd); |