Merge "Allow surfaceflinger to read /proc/pid/cmdline of dumpstate."
diff --git a/binderservicedomain.te b/binderservicedomain.te
index 5990301..757d807 100644
--- a/binderservicedomain.te
+++ b/binderservicedomain.te
@@ -7,3 +7,7 @@
# Allow dumpsys to work from adb shell
allow binderservicedomain devpts:chr_file rw_file_perms;
+
+# Receive and write to a pipe received over Binder from an app.
+allow binderservicedomain appdomain:fd use;
+allow binderservicedomain appdomain:fifo_file write;
diff --git a/inputflinger.te b/inputflinger.te
index dd5c086..b08b345 100644
--- a/inputflinger.te
+++ b/inputflinger.te
@@ -6,3 +6,5 @@
init_daemon_domain(inputflinger)
binder_use(inputflinger)
binder_service(inputflinger)
+
+binder_call(inputflinger, system_server)
diff --git a/system_server.te b/system_server.te
index ecd31b3..e85281c 100644
--- a/system_server.te
+++ b/system_server.te
@@ -132,6 +132,7 @@
r_dir_file(system_server, mediaserver)
r_dir_file(system_server, sdcardd)
r_dir_file(system_server, surfaceflinger)
+r_dir_file(system_server, inputflinger)
# Use sockets received over binder from various services.
allow system_server mediaserver:tcp_socket rw_socket_perms;