Merge changes from topic 'crash_dump_append' am: cce8513c

am: 6a25a388

Change-Id: Iad2bd4dc9ac64ac9a41800ff96dd9b6da358a77c

private/crash_dump.te

-### HACK: Make crash_dump permissive temporarily to catch denials without breaking backtraces.
-userdebug_or_eng(`
-  permissive crash_dump;
-')

public/crash_dump.te

@@ -19,7 +19,10 @@ userdebug_or_eng(`
 
 # Use inherited file descriptors
 allow crash_dump domain:fd use;
-allow crash_dump domain:fifo_file write;
+
+# Write to the IPC pipe inherited from crashing processes.
+# Append to pipes given to us by processes requesting dumps (e.g. dumpstate)
+allow crash_dump domain:fifo_file { write append };
 
 r_dir_file(crash_dump, domain)
 allow crash_dump exec_type:file r_file_perms;