land: Grant netmgrd proper unix perms

Do not grant DAC override permission which would allow this daemon
unix permissions to everything.

avc: denied { dac_override } for capability=1 scontext=u:r:netmgrd:s0 tcontext=u:r:netmgrd:s0 tclass=capability

Adding
wifi group to access
/data/misc/net/rt_tables
-rw-r--r--  1 system wifi   130 2016-05-11 09:58 rt_tables

wakelock group to access:
/sys/power/wake_lock
-rw-rw----  1 radio  wakelock 4096 1970-01-19 15:03 wake_lock

radio/inet groups to access
/dev/socket/netmgr/netmgr_connect_socket
srw-rw---- 1 radio inet    0 1970-01-19 15:03 netmgr_connect_socket

Change-Id: I7ed6a98dd85bf7efa8cab0b8a0851217f030ba8b
This commit is contained in:
Jeff Vander Stoep 2016-05-11 10:56:42 -07:00 committed by chaubeyprateek
parent 1fb2e3443e
commit 9d9aa46c82

View file

@ -450,7 +450,8 @@ on property:hw.fm.init=1
service netmgrd /system/bin/netmgrd service netmgrd /system/bin/netmgrd
class main class main
group system wakelock user root
group root wifi wakelock radio inet
writepid /dev/cpuset/system-background/tasks writepid /dev/cpuset/system-background/tasks
service qti /system/vendor/bin/qti service qti /system/vendor/bin/qti