crash_dump: allow reading from pipes.
Bug: http://b/63989615
Test: mma
Change-Id: I41506ecb0400867230502181c1aad7e51ce16d70
diff --git a/public/crash_dump.te b/public/crash_dump.te
index d70b150..74bff80 100644
--- a/public/crash_dump.te
+++ b/public/crash_dump.te
@@ -23,9 +23,11 @@
# Use inherited file descriptors
allow crash_dump domain:fd use;
-# Write to the IPC pipe inherited from crashing processes.
+# Read/write IPC pipes inherited from crashing processes.
+allow crash_dump domain:fifo_file { read write };
+
# Append to pipes given to us by processes requesting dumps (e.g. dumpstate)
-allow crash_dump domain:fifo_file { write append };
+allow crash_dump domain:fifo_file { append };
r_dir_file(crash_dump, domain)
allow crash_dump exec_type:file r_file_perms;