Allow dumpstate to run ss.

Bug: 23113288
Change-Id: I123e5d40955358665800fe3b86cd5f8dbaeb8717

dumpstate.te

@@ -136,6 +136,9 @@ control_logd(dumpstate)
 allow dumpstate net_data_file:dir search;
 allow dumpstate net_data_file:file r_file_perms;
 
+# List sockets via ss.
+allow dumpstate self:netlink_tcpdiag_socket { create_socket_perms nlmsg_read };
+
 # Access /data/tombstones.
 allow dumpstate tombstone_data_file:dir r_dir_perms;
 allow dumpstate tombstone_data_file:file r_file_perms;