Merge "storaged: allow shell to call dumpsys storaged" am: eca32251 am: f81e48b6

am: fc8bbd7e

Change-Id: I1f7323f857093bc793bd03f956c64626170e503f

private/shell.te

@@ -10,3 +10,6 @@ allow shell atrace_exec:file rx_file_perms;
 # Run app_process.
 # XXX Transition into its own domain?
 app_domain(shell)
+
+# allow shell to call dumpsys storaged
+binder_call(shell, storaged)

private/storaged.te

@@ -21,6 +21,10 @@ userdebug_or_eng(`
   allow storaged debugfs_mmc:file r_file_perms;
 ')
 
+# Needed to provide debug dump output via dumpsys pipes.
+allow storaged shell:fd use;
+allow storaged shell:fifo_file write;
+
 # Binder permissions
 add_service(storaged, storaged_service)