From f0264fe2e9080ffd0151474b835e4ba793ab98cc Mon Sep 17 00:00:00 2001
From: Joel Galenson <jgalenson@google.com>
Date: Wed, 2 Jan 2019 09:22:10 -0800
Subject: [PATCH] Allow dumpstate to read sysfs_loop files.
This prevents denials while taking a bugreport.
Bug: 116711254
Test: cts-tradefed run cts -m CtsSecurityHostTestCases -t
android.security.cts.SELinuxHostTest#testNoBugreportDenials
Change-Id: Ie190bfa62cf5aa172ebfff8bfd82dea2a7d1a016
---
public/dumpstate.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/public/dumpstate.te b/public/dumpstate.te
index cd3310aee..1c8bbb1e0 100644
--- a/public/dumpstate.te
+++ b/public/dumpstate.te
@@ -90,6 +90,7 @@ allow dumpstate sysfs_type:dir r_dir_perms;
allow dumpstate {
sysfs_dm
+ sysfs_loop
sysfs_usb
sysfs_zram
}:file r_file_perms;
--
GitLab