Change executable permissions for Android

Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>

diff --git a/src/utils/os_unix.c b/src/utils/os_unix.c
index c696fae2566d4c80eb17a531bf492a6ca27118f0..9a2465ad397b044b2eb3484ea9ec4ee501d4f49f 100644 (file)
--- a/src/utils/os_unix.c
+++ b/src/utils/os_unix.c
@@ -14,6 +14,12 @@
 
 #include "includes.h"
 
+#ifdef ANDROID
+#include <linux/capability.h>
+#include <linux/prctl.h>
+#include <private/android_filesystem_config.h>
+#endif /* ANDROID */
+
 #include "os.h"
 
 #ifdef WPA_TRACE
@@ -232,6 +238,30 @@ char * os_rel2abs_path(const char *rel_path)
 
 int os_program_init(void)
 {
+#ifdef ANDROID
+       /*
+        * We ignore errors here since errors are normal if we
+        * are already running as non-root.
+        */
+       gid_t groups[] = { AID_INET, AID_WIFI, AID_KEYSTORE };
+       struct __user_cap_header_struct header;
+       struct __user_cap_data_struct cap;
+
+       setgroups(sizeof(groups)/sizeof(groups[0]), groups);
+
+       prctl(PR_SET_KEEPCAPS, 1, 0, 0, 0);
+
+       setgid(AID_WIFI);
+       setuid(AID_WIFI);
+
+       header.version = _LINUX_CAPABILITY_VERSION;
+       header.pid = 0;
+       cap.effective = cap.permitted =
+               (1 << CAP_NET_ADMIN) | (1 << CAP_NET_RAW);
+       cap.inheritable = 0;
+       capset(&header, &cap);
+#endif /* ANDROID */
+
 #ifdef WPA_TRACE
        dl_list_init(&alloc_list);
 #endif /* WPA_TRACE */