Add permissions for screencap for dumpstate.

screencap domain needs additional permissions for
dumpstate to dump screenshots.

Test: adb shell cmd activity bug-report
Bug: 65206688
Change-Id: I824f345fd90d286454d570576c5888d7719c4c5c

private/screencap.te

-type screencap, domain;
 type screencap_exec, exec_type, file_type;
 
 typeattribute screencap coredomain;
@@ -35,6 +34,8 @@ allow screencap mnt_user_file:dir search;
 allow screencap mnt_user_file:lnk_file read;
 allow screencap sdcardfs:dir { search write };
 allow screencap sdcardfs:file { open write };
+allow screencap shell_data_file:file create_file_perms;
+allow screencap shell_data_file:dir rw_dir_perms;
 allow screencap storage_file:dir search;
 allow screencap storage_file:lnk_file read;
 allow screencap tmpfs:dir search;

public/domain.te

@@ -924,6 +924,7 @@ neverallow {
   -dumpstate
   -installd
   -init
+  -screencap
   -shell
   -vold
 } shell_data_file:dir no_w_dir_perms;
@@ -935,6 +936,7 @@ neverallow {
   -dumpstate
   -init
   -installd
+  -screencap
   -system_server # why?
   userdebug_or_eng(`-uncrypt')
 } shell_data_file:dir { open search };
@@ -947,6 +949,7 @@ neverallow {
   -appdomain
   -dumpstate
   -installd
+  -screencap
   userdebug_or_eng(`-uncrypt')
 } shell_data_file:file open;
 

public/screencap.te

+type screencap, domain;