From 70a31245bab10c75b4a397431196466032c04e6e Mon Sep 17 00:00:00 2001
From: David Brazdil <dbrazdil@google.com>
Date: Fri, 3 Jun 2016 15:43:50 +0100
Subject: [PATCH] dumpstate: Change SELinux policy to allow reading
/data/misc/profiles
This is needed in order to include profile files in bugreports.
Bug: 28610953
Change-Id: I025189a4ac66b936711fdb4e20b10c2b0a7427d1
---
dumpstate.te | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/dumpstate.te b/dumpstate.te
index 6ee8b058e..64ca3010c 100644
--- a/dumpstate.te
+++ b/dumpstate.te
@@ -140,6 +140,14 @@ allow dumpstate cache_recovery_file:file r_file_perms;
allow dumpstate recovery_data_file:dir r_dir_perms;
allow dumpstate recovery_data_file:file r_file_perms;
+# Access /data/misc/profiles/{cur,ref}/
+userdebug_or_eng(`
+ allow dumpstate user_profile_data_file:dir r_dir_perms;
+ allow dumpstate user_profile_data_file:file r_file_perms;
+ allow dumpstate user_profile_foreign_dex_data_file:dir r_dir_perms;
+ allow dumpstate user_profile_foreign_dex_data_file:file r_file_perms;
+')
+
# Access /data/misc/logd
userdebug_or_eng(`
allow dumpstate misc_logd_file:dir r_dir_perms;
--
GitLab