commit 2c831009a59f122fc870bedb6ed084eb5aeea0b0
author Geremy Condra <gcondra@google.com> Tue Apr 02 21:34:41 2013 -0700
committer Geremy Condra <gcondra@google.com> Wed Apr 03 12:00:41 2013 -0700
tree be0c0217f21fd95f3bd075b4cf90794342ca9acf
parent 4387956f2607f9836e13267c10c5a5d0929eeb4c

Fix various SELinux denials.

Change-Id: I73a2b841ab3399b7528b8084a5c4736e6ecea48a

adbd.te

diff --git a/adbd.te b/adbd.te
index 074f35b..8b809e2 100644
--- a/adbd.te
+++ b/adbd.te
@@ -4,7 +4,7 @@
 allow adbd adb_device:chr_file rw_file_perms;
 allow adbd qemu_device:chr_file rw_file_perms;
 allow adbd self:capability { net_raw setgid setuid dac_override sys_boot sys_admin };
-allow adbd rootfs:file { read entrypoint };
+allow adbd rootfs:file { r_file_perms entrypoint };
 allow adbd init:process sigchld;
 allow adbd self:tcp_socket *;
 allow adbd self:unix_stream_socket *;

system.te

diff --git a/system.te b/system.te
index 503bd3c..451eb63 100644
--- a/system.te
+++ b/system.te
@@ -112,6 +112,7 @@
 unix_socket_connect(system, bluetooth, bluetoothd)
 unix_socket_connect(system, racoon, racoon)
 unix_socket_send(system, wpa, wpa)
+unix_socket_send(system, wpa, init)
 
 # Communicate over a socket created by surfaceflinger.
 allow system surfaceflinger:unix_stream_socket { read write setopt };