[gpuservice] allow "adb shell cmd gpu vkjson"
Also allow adb shell dumpsys gpu to not return error.
Bug: 120095213
Test: flash non-eng build and adb shell cmd gpu vkjson
Change-Id: Ia4a50a475ce76ec35e082dd52d4a6c80dde7f571
diff --git a/private/gpuservice.te b/private/gpuservice.te
index 6cbd89c..5e8aab5 100644
--- a/private/gpuservice.te
+++ b/private/gpuservice.te
@@ -22,6 +22,9 @@
allow gpuservice graphics_device:dir search;
allow gpuservice graphics_device:chr_file rw_file_perms;
+# Needed for dumpsys pipes.
+allow gpuservice shell:fifo_file write;
+
# Use socket supplied by adbd, for cmd gpu vkjson etc.
allow gpuservice adbd:unix_stream_socket { read write getattr };
diff --git a/private/shell.te b/private/shell.te
index ee5b73c..885714d 100644
--- a/private/shell.te
+++ b/private/shell.te
@@ -55,6 +55,9 @@
# Allow shell-based "dumpsys" to call into bufferhubd.
binder_call(shell, bufferhubd);
+# Allow shell to run adb shell cmd gpu commands.
+binder_call(shell, gpuservice);
+
# Allow shell to use atrace HAL
hal_client_domain(shell, hal_atrace)