Allow dumpstate to call mediaswcodec over binder
This prevents denials while taking a bugreport.
Test: cts-tradefed run cts -m CtsSecurityHostTestCases -t
android.security.cts.SELinuxHostTest#testNoBugreportDenials
Change-Id: I381b39fa127f82fcef5d820a04209fd1ba4f63cd
diff --git a/public/dumpstate.te b/public/dumpstate.te
index 3b5c5eb..72e2176 100644
--- a/public/dumpstate.te
+++ b/public/dumpstate.te
@@ -278,6 +278,9 @@
# Allow dumpstate to talk to bufferhubd over binder
binder_call(dumpstate, bufferhubd);
+# Allow dumpstate to talk to mediaswcodec over binder
+binder_call(dumpstate, mediaswcodec);
+
# Allow dumpstate to kill vendor dumpstate service by init
set_prop(dumpstate, ctl_dumpstate_prop)