commit b76d0b306043af7e4f2a232a053dd364063850f6
author Roman Kiryanov <rkir@google.com> Fri Jul 31 13:39:11 2020 -0700
committer Roman Kiryanov <rkir@google.com> Fri Jul 31 13:39:11 2020 -0700
tree fb28340673a7a93e144a75ced08123583d070ce7
parent 83b88d5d61a571ef88f60689cc49a04877246ed3

Allow dumpstate to getattr apex_info_file:file

required by the CTS test.

Bug: 162594434
Test: atest android.security.cts.SELinuxHostTest#testNoBugreportDenials
Signed-off-by: Roman Kiryanov <rkir@google.com>
Change-Id: Ic9962415d740e300ceb418b3265c24433a9e4f4c

public/dumpstate.te

diff --git a/public/dumpstate.te b/public/dumpstate.te
index 29696a1..590517a 100644
--- a/public/dumpstate.te
+++ b/public/dumpstate.te
@@ -337,6 +337,8 @@
 allow dumpstate binderfs_logs:dir r_dir_perms;
 allow dumpstate binderfs_logs:file r_file_perms;
 
+allow dumpstate apex_info_file:file getattr;
+
 ###
 ### neverallow rules
 ###