From 1802a1633698abd562fced57be3a00187d578ce6 Mon Sep 17 00:00:00 2001
From: Jooyung Han <jooyung@google.com>
Date: Thu, 27 Oct 2022 15:35:57 +0900
Subject: [PATCH] Allow dumpstate to read apex-info-list.xml

Bug: 254486775
Test: sesearch --allow -s dumpstate -t apex_info_file policy
Change-Id: I52cc2ed2fcb0cf969009e323300741169d8e6d8a
---
 public/dumpstate.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/dumpstate.te b/public/dumpstate.te
index c73c2e718..1f3df3cd1 100644
--- a/public/dumpstate.te
+++ b/public/dumpstate.te
@@ -364,7 +364,7 @@ allow dumpstate binderfs_logs:dir r_dir_perms;
 allow dumpstate binderfs_logs:file r_file_perms;
 allow dumpstate binderfs_logs_proc:file r_file_perms;
 
-allow dumpstate apex_info_file:file getattr;
+use_apex_info(dumpstate)
 
 ###
 ### neverallow rules