diff --git a/dumpstate.te b/dumpstate.te index 29695b7ddf0b3126e0a3fc58fb4752842fb988e2..dd0a7e080fd09746bf901d6bd47689d8c41ed660 100644 --- a/dumpstate.te +++ b/dumpstate.te @@ -141,6 +141,9 @@ control_logd(dumpstate) allow dumpstate net_data_file:dir search; allow dumpstate net_data_file:file r_file_perms; +# List sockets via ss. +allow dumpstate self:netlink_tcpdiag_socket { create_socket_perms nlmsg_read }; + # Access /data/tombstones. allow dumpstate tombstone_data_file:dir r_dir_perms; allow dumpstate tombstone_data_file:file r_file_perms;