From 04f3d79077fca1d11097895f0f6dbd57b4afa6d0 Mon Sep 17 00:00:00 2001
From: Christopher Ferris <cferris@google.com>
Date: Fri, 12 Sep 2014 21:59:05 -0700
Subject: [PATCH] Allow dumpstate to read /system/bin executables.
On 64 bit systems, it's necessary to read the /system/bin executables
elf header to determine if it's a 32 bit or 64 bit executable to
contact the correct debuggerd service.
Bug: 17487122
Change-Id: Ica78aa54e5abbb051924166c6808b79b516274fe
---
dumpstate.te | 3 +++
1 file changed, 3 insertions(+)
diff --git a/dumpstate.te b/dumpstate.te
index b2870bcc0..d9baadadc 100644
--- a/dumpstate.te
+++ b/dumpstate.te
@@ -100,3 +100,6 @@ allow dumpstate net_data_file:file r_file_perms;
# Access /data/tombstones.
allow dumpstate tombstone_data_file:dir r_dir_perms;
allow dumpstate tombstone_data_file:file r_file_perms;
+
+# Access /system/bin executables to determine type of executable.
+allow dumpstate {drmserver_exec mediaserver_exec sdcardd_exec surfaceflinger_exec}:file r_file_perms;
--
GitLab