From 148674ab161d810ff1c6a98e1e324d3ac434b33f Mon Sep 17 00:00:00 2001
From: Jin Qian <jinqian@google.com>
Date: Wed, 27 Sep 2017 18:57:01 -0700
Subject: [PATCH] Allow dumpstate to run iotop
Test: adb bugreport
Bug: 63629306
Change-Id: I7a366b199ddd0ec303dc25ca8c35764c5d7e3af8
---
public/dumpstate.te | 3 +++
1 file changed, 3 insertions(+)
diff --git a/public/dumpstate.te b/public/dumpstate.te
index d0204a50b..42d929049 100644
--- a/public/dumpstate.te
+++ b/public/dumpstate.te
@@ -250,6 +250,9 @@ binder_call(dumpstate, installd);
# Allow dumpstate to run ip xfrm policy
allow dumpstate self:netlink_xfrm_socket { create_socket_perms_no_ioctl nlmsg_read };
+# Allow dumpstate to run iotop
+allow dumpstate self:netlink_socket create_socket_perms_no_ioctl;
+
###
### neverallow rules
###
--
GitLab