Ensure taking a bugreport generates no denials.
This commit adds new SELinux permissions and neverallow rules so that
taking a bugreport does not produce any denials.
Bug: 73256908
Test: Captured bugreports on Sailfish and Walleye and verified
that there were no denials.
Merged-In: If3f2093a2b51934938e3d7e5c42036b2e2bf6de9
Change-Id: I10882e7adda0bb51bf373e0e62fda0acc8ad34eb
diff --git a/private/storaged.te b/private/storaged.te
index a1e6802..7fe6286 100644
--- a/private/storaged.te
+++ b/private/storaged.te
@@ -53,6 +53,9 @@
# running as root. See b/35323867 #3.
dontaudit storaged self:global_capability_class_set dac_override;
+# For collecting bugreports.
+allow storaged dumpstate:fifo_file write;
+
###
### neverallow
###