commit 69fc359cd41284fe5ad5900af456db09293697f9
author Treehugger Robot <treehugger-gerrit@google.com> Wed May 13 19:43:34 2020 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Wed May 13 19:43:34 2020 +0000
tree c85872b1e10757946443748060d6fd88bbe6dc72
parent c9767ea276a9d14a06cd936a93198d0bc5f9ce45
parent b0fb5b44f8558146d7e287bd7d8b603226a1e31d

Merge "servicemanager: add dump fd permissions"

public/servicemanager.te

diff --git a/public/servicemanager.te b/public/servicemanager.te
index 10347d9..85777f5 100644
--- a/public/servicemanager.te
+++ b/public/servicemanager.te
@@ -22,6 +22,8 @@
 not_full_treble(`allow servicemanager nonplat_service_contexts_file:file r_file_perms;')
 
 add_service(servicemanager, service_manager_service)
+allow servicemanager dumpstate:fd use;
+allow servicemanager dumpstate:fifo_file write;
 
 # Check SELinux permissions.
 selinux_check_access(servicemanager)