commit 7be9b32fdb355ea58345a59233356ecaab8957bf
author Kiyoung Kim <kiyoungkim@google.com> Wed Feb 05 07:58:12 2020 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Wed Feb 05 07:58:12 2020 +0000
tree 1a8a2a1b9dc8da13b3eec896962f541bdaa126b0
parent c98291c37c466a10d9cbb2301104a9d06d3aa102
parent 608029fb861a2619e33ae334da8f62bd23bc99b3

Merge "Allow dumpstate to open and read linkerconfig directory"

public/dumpstate.te

diff --git a/public/dumpstate.te b/public/dumpstate.te
index 94b0e8d..2c0e470 100644
--- a/public/dumpstate.te
+++ b/public/dumpstate.te
@@ -295,6 +295,9 @@
 # Allow dumpstate to run ss
 allow dumpstate { domain pdx_channel_socket_type pdx_endpoint_socket_type }:socket_class_set getattr;
 
+# Allow dumpstate to read linkerconfig directory
+allow dumpstate linkerconfig_file:dir { read open };
+
 # For when dumpstate runs df
 dontaudit dumpstate {
   mnt_vendor_file