Permissions for screencap saving files to /sdcard/

am: c12c7349

Change-Id: I419f605b03d497d3babd09651b977bc065677c71

private/screencap.te

@@ -8,7 +8,7 @@ allow screencap ion_device:chr_file rw_file_perms;
 
 allow screencap adbd:fifo_file write;
 allow screencap adbd:fd use;
-allow screencap adbd:unix_stream_socket { read write };
+allow screencap adbd:unix_stream_socket { read write getattr ioctl };
 
 allow screencap shell_data_file:file write;
 allow screencap shell:fd use;
@@ -20,7 +20,21 @@ allow screencap dumpstate:unix_stream_socket { read write };
 binder_use(screencap)
 binder_call(screencap, surfaceflinger)
 allow screencap surfaceflinger_service:service_manager find;
-allow screencap surfaceflinger:fd use;
+binder_call(screencap, system_server)
+allow screencap activity_service:service_manager find;
 
 hwbinder_use(screencap)
 hal_client_domain(screencap, hal_graphics_allocator)
+
+allow screencap shell_exec:file rx_file_perms;
+allow screencap system_file:file execute_no_trans;
+
+allow screencap media_rw_data_file:dir rw_dir_perms;
+allow screencap media_rw_data_file:file rw_file_perms;
+allow screencap mnt_user_file:dir search;
+allow screencap mnt_user_file:lnk_file read;
+allow screencap sdcardfs:dir { search write };
+allow screencap sdcardfs:file { open write };
+allow screencap storage_file:dir search;
+allow screencap storage_file:lnk_file read;
+allow screencap tmpfs:dir search;

private/system_server.te

@@ -178,6 +178,7 @@ binder_call(system_server, gatekeeperd)
 binder_call(system_server, installd)
 binder_call(system_server, incidentd)
 binder_call(system_server, netd)
+binder_call(system_server, screencap)
 binder_call(system_server, wificond)
 binder_service(system_server)