commit c4a732877d84bbb0e0dea6b034268681642f99da
author William Roberts <william.c.roberts@intel.com> Tue May 09 15:37:27 2017 +0000
committer android-build-merger <android-build-merger@google.com> Tue May 09 15:37:27 2017 +0000
tree 59b3ef68b03b8efece703d58205aaf389d570a6c
parent d868e839a213af696b2c3d73b352d619495ff725
parent fbb96d8a62335075317853b2c2bc9ec7b666082c

Merge "storaged: add permissions for dumpstate" am: 611202ef53 am: 702605c62f
am: fbb96d8a62

Change-Id: I258cec0012787532b7bdcdbac6fecacd5a2cd33b

private/storaged.te

diff --git a/private/storaged.te b/private/storaged.te
index 96433b3..d5abd73 100644
--- a/private/storaged.te
+++ b/private/storaged.te
@@ -40,6 +40,9 @@
 allow storaged batteryproperties_service:service_manager find;
 binder_call(storaged, healthd)
 
+# Implements a dumpsys interface.
+allow storaged dumpstate:fd use;
+
 # Kernel does extra check on CAP_DAC_OVERRIDE for libbinder when storaged is
 # running as root. See b/35323867 #3.
 dontaudit storaged self:capability dac_override;