Allow dumpstate to make binder calls to mmd
To avoid SELinux denials when taking bug reports.
Bug: 404278640
Test: atest
CtsSecurityHostTestCases:android.security.cts.SELinuxHostTest#testNoBugreportDenials
Change-Id: I12c2c28e9548afdb63625de06f8cfc4507d0292e
diff --git a/private/dumpstate.te b/private/dumpstate.te
index 501d829..0b717dc 100644
--- a/private/dumpstate.te
+++ b/private/dumpstate.te
@@ -67,6 +67,9 @@
# Allow dumpstate to talk to ot_daemon service over binder
binder_call(dumpstate, ot_daemon)
+# Allow dumpstate to talk to mmd service over binder
+binder_call(dumpstate, mmd)
+
# Collect metrics on boot time created by init
get_prop(dumpstate, boottime_prop)