Allow dumpstate to read some directories.
This prevents denials while taking a bugreport.
Bug: 116711254
Test: cts-tradefed run cts -m CtsSecurityHostTestCases -t
android.security.cts.SELinuxHostTest#testNoBugreportDenials
Change-Id: I64f441eb66c355d03eaf7755f2e9d3e970305ecd
diff --git a/public/dumpstate.te b/public/dumpstate.te
index 1c8bbb1..39ef87d 100644
--- a/public/dumpstate.te
+++ b/public/dumpstate.te
@@ -205,6 +205,9 @@
allow dumpstate misc_logd_file:file r_file_perms;
')
+allow dumpstate app_fuse_file:dir r_dir_perms;
+allow dumpstate overlayfs_file:dir r_dir_perms;
+
allow dumpstate {
service_manager_type
-apex_service