Merge "dumpstate: Change SELinux policy to allow reading /data/misc/profiles" into nyc-dev

f31a55c0 · David Brazdil · Android (Google) Code Review · 44c98bb7 · 70a31245 · f31a55c0
Commit f31a55c0 authored 8 years ago by David Brazdil Committed by Android (Google) Code Review 8 years ago
--- a/dumpstate.te
+++ b/dumpstate.te
@@ -140,6 +140,14 @@ allow dumpstate cache_recovery_file:file r_file_perms;
 allow dumpstate recovery_data_file:dir r_dir_perms;
 allow dumpstate recovery_data_file:file r_file_perms;

+# Access /data/misc/profiles/{cur,ref}/
+userdebug_or_eng(`
+  allow dumpstate user_profile_data_file:dir r_dir_perms;
+  allow dumpstate user_profile_data_file:file r_file_perms;
+  allow dumpstate user_profile_foreign_dex_data_file:dir r_dir_perms;
+  allow dumpstate user_profile_foreign_dex_data_file:file r_file_perms;
+')
+
 # Access /data/misc/logd
 userdebug_or_eng(`
  allow dumpstate misc_logd_file:dir r_dir_perms;