From c0044bfac21e11e776ecef9b9f38e320ab102663 Mon Sep 17 00:00:00 2001
From: Chia-I Wu <olv@google.com>
Date: Wed, 19 Apr 2017 22:04:34 -0700
Subject: [PATCH] dumpstate is a client of graphics allocator
This fixes
avc: denied { call } for comm="screencap" scontext=u:r:dumpstate:s0
tcontext=u:r:hal_graphics_allocator_default:s0 tclass=binder
permissive=0
Bug: 37360953
Test: adb shell dumpstate -p -o <path>
Change-Id: Ia9387559e3ec1ba51b614bb9d24294fbbbd51b1a
---
public/dumpstate.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/public/dumpstate.te b/public/dumpstate.te
index 3322e1468..587156f9e 100644
--- a/public/dumpstate.te
+++ b/public/dumpstate.te
@@ -97,6 +97,7 @@ binder_call(dumpstate, { appdomain netd wificond })
# Vibrate the device after we are done collecting the bugreport
# For binderized mode:
hal_client_domain(dumpstate, hal_dumpstate)
+hal_client_domain(dumpstate, hal_graphics_allocator)
binder_call(dumpstate, hal_vibrator)
hal_client_domain(dumpstate, hal_vibrator)
# For passthrough mode:
--
GitLab