diff --git a/private/priv_app.te b/private/priv_app.te index a703ba8d436c12e395dfdf7e204d176d074b013a..4ce142f0c11ec8fe334372625f8fbb867af0ad99 100644 --- a/private/priv_app.te +++ b/private/priv_app.te @@ -91,6 +91,10 @@ allowxperm priv_app self:udp_socket ioctl SIOCGIFHWADDR; binder_call(priv_app, update_engine) allow priv_app update_engine_service:service_manager find; +# Allow GMS core to communicate with dumpsys storaged. +binder_call(priv_app, storaged) +allow priv_app storaged_service:service_manager find; + # Allow Phone to read/write cached ringtones (opened by system). allow priv_app ringtone_file:file { getattr read write }; diff --git a/private/storaged.te b/private/storaged.te index 698999f515bd59bbfc0a28172531e2eb1f46e657..96433b308535cd63f48306eaccf43dc33d54cd9f 100644 --- a/private/storaged.te +++ b/private/storaged.te @@ -25,6 +25,11 @@ userdebug_or_eng(` allow storaged shell:fd use; allow storaged shell:fifo_file write; +# Needed for GMScore to call dumpsys storaged +allow storaged priv_app:fd use; +allow storaged app_data_file:file write; +allow storaged permission_service:service_manager find; + # Binder permissions add_service(storaged, storaged_service)