Add permissions for screencap for dumpstate.

am: b5dd44b1

Change-Id: Ic8abc28d08483866112dd8075340fe71e82ae653

private/screencap.te

-type screencap, domain;
 type screencap_exec, exec_type, file_type;
 
 typeattribute screencap coredomain;
@@ -35,6 +34,8 @@ allow screencap mnt_user_file:dir search;
 allow screencap mnt_user_file:lnk_file read;
 allow screencap sdcardfs:dir { search write };
 allow screencap sdcardfs:file { open write };
+allow screencap shell_data_file:file create_file_perms;
+allow screencap shell_data_file:dir rw_dir_perms;
 allow screencap storage_file:dir search;
 allow screencap storage_file:lnk_file read;
 allow screencap tmpfs:dir search;

public/domain.te

@@ -925,6 +925,7 @@ neverallow {
   -dumpstate
   -installd
   -init
+  -screencap
   -shell
   -vold
 } shell_data_file:dir no_w_dir_perms;
@@ -936,6 +937,7 @@ neverallow {
   -dumpstate
   -init
   -installd
+  -screencap
   -system_server # why?
   userdebug_or_eng(`-uncrypt')
 } shell_data_file:dir { open search };
@@ -948,6 +950,7 @@ neverallow {
   -appdomain
   -dumpstate
   -installd
+  -screencap
   userdebug_or_eng(`-uncrypt')
 } shell_data_file:file open;
 

public/screencap.te

+type screencap, domain;