Refer to hal_dumpstate_server in neverallow rules
hal_dumpstate gets optimized away by the policy compiler causing
a CTS failure:
neverallow { -init -dumpstate -hal_dumpstate -vendor_init } hal_dumpstate_config_prop:file { { append create link unlink relabelfrom rename setattr write } open read ioctl lock watch watch_mount watch_sb watch_with_perm watch_reads };
Warning! Type or attribute hal_dumpstate used in neverallow undefined in policy being checked
Fixes: 166168257
Test: build policy
Change-Id: Ia7437b8297794502d496e9bd9998dddfdcb747ef
diff --git a/private/property.te b/private/property.te
index 96edc14..2d3d861 100644
--- a/private/property.te
+++ b/private/property.te
@@ -450,6 +450,6 @@
neverallow {
-init
-dumpstate
- -hal_dumpstate
+ -hal_dumpstate_server
not_compatible_property(`-vendor_init')
} hal_dumpstate_config_prop:file no_rw_file_perms;