gmscore_app: anr_data_file permissions
More historical context in http://b/18504118
This also adds an auditallow to the same rule for priv_app, so we can
delete it once no logs show up in go/sedenials for this rule
triggering.
Bug: 142672293
Test: TH
Change-Id: I5729b89af83090e6e31c012c8acb0f0114c87d3d
diff --git a/private/gmscore_app.te b/private/gmscore_app.te
index 38238c8..daca057 100644
--- a/private/gmscore_app.te
+++ b/private/gmscore_app.te
@@ -129,3 +129,5 @@
allow gmscore_app shell_data_file:file r_file_perms;
allow gmscore_app shell_data_file:dir r_dir_perms;
+# b/18504118: Allow reads from /data/anr/traces.txt
+allow gmscore_app anr_data_file:file r_file_perms;
diff --git a/private/priv_app.te b/private/priv_app.te
index 3263877..e180b1d 100644
--- a/private/priv_app.te
+++ b/private/priv_app.te
@@ -95,6 +95,10 @@
# b/18504118: Allow reads from /data/anr/traces.txt
allow priv_app anr_data_file:file r_file_perms;
+# b/142672293: No other priv-app should need this allow rule now that GMS core runs in its own domain.
+userdebug_or_eng(`
+ auditallow priv_app anr_data_file:file r_file_perms;
+')
# For AppFuse.
allow priv_app vold:fd use;