Merge "storaged: allow shell to call dumpsys storaged" am: eca32251

am: f81e48b6

Change-Id: Ied9a916f080a85d41165cb9e427ad8e696e695ed

private/shell.te

@@ -10,3 +10,6 @@ allow shell atrace_exec:file rx_file_perms;
 # Run app_process.
 # XXX Transition into its own domain?
 app_domain(shell)
+
+# allow shell to call dumpsys storaged
+binder_call(shell, storaged)

private/storaged.te

@@ -21,6 +21,10 @@ userdebug_or_eng(`
   allow storaged debugfs_mmc:file r_file_perms;
 ')
 
+# Needed to provide debug dump output via dumpsys pipes.
+allow storaged shell:fd use;
+allow storaged shell:fifo_file write;
+
 # Binder permissions
 add_service(storaged, storaged_service)