initial dumpstate domain
Add the necessary rules to support dumpstate.
Start off initially in permissive until it has more testing.
Dumpstate is triggered by running "adb bugreport"
Change-Id: Ic17a60cca1f6f40daa4f2c51e9ad6009ef36cfbd
diff --git a/su.te b/su.te
index dda7708..2a3d007 100644
--- a/su.te
+++ b/su.te
@@ -2,6 +2,10 @@
type su_exec, exec_type, file_type;
domain_auto_trans(shell, su_exec, su)
+# Allow dumpstate to call su on userdebug / eng builds to collect
+# additional information.
+domain_auto_trans(dumpstate, su_exec, su)
+
# su is unconfined.
unconfined_domain(su)