Merge "[gpuservice] allow "adb shell cmd gpu vkjson""

private/gpuservice.te

@@ -22,6 +22,9 @@ hwbinder_use(gpuservice)
 allow gpuservice graphics_device:dir search;
 allow gpuservice graphics_device:chr_file rw_file_perms;
 
+# Needed for dumpsys pipes.
+allow gpuservice shell:fifo_file write;
+
 # Use socket supplied by adbd, for cmd gpu vkjson etc.
 allow gpuservice adbd:unix_stream_socket { read write getattr };
 

private/shell.te

@@ -55,6 +55,9 @@ allow shell perfetto_traces_data_file:file r_file_perms;
 # Allow shell-based "dumpsys" to call into bufferhubd.
 binder_call(shell, bufferhubd);
 
+# Allow shell to run adb shell cmd gpu commands.
+binder_call(shell, gpuservice);
+
 # Allow shell to use atrace HAL
 hal_client_domain(shell, hal_atrace)