From 7c275a6b9d45679976ff98a5649a3d864b0b4f61 Mon Sep 17 00:00:00 2001
From: Joel Galenson <jgalenson@google.com>
Date: Tue, 13 Nov 2018 12:35:17 -0800
Subject: [PATCH] Allow dumpstate to call gpuservice over binder

This prevents denials while taking a bugreport.

Bug: 116711254
Test: cts-tradefed run cts -m CtsSecurityHostTestCases -t
android.security.cts.SELinuxHostTest#testNoBugreportDenials

Change-Id: I65dffda9806e0d627978ffdd392e3deb625149b7
---
 private/dumpstate.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/private/dumpstate.te b/private/dumpstate.te
index d1fbacccf..293998d98 100644
--- a/private/dumpstate.te
+++ b/private/dumpstate.te
@@ -28,6 +28,9 @@ binder_call(dumpstate, storaged)
 # Allow dumpstate to make binder calls to statsd
 binder_call(dumpstate, statsd)
 
+# Allow dumpstate to talk to gpuservice over binder
+binder_call(dumpstate, gpuservice);
+
 # Collect metrics on boot time created by init
 get_prop(dumpstate, boottime_prop)
 
-- 
GitLab