09e6abd91b
Add the necessary rules to support dumpstate. Start off initially in permissive until it has more testing. Dumpstate is triggered by running "adb bugreport" Change-Id: Ic17a60cca1f6f40daa4f2c51e9ad6009ef36cfbd
13 lines
331 B
Text
13 lines
331 B
Text
type su, domain;
|
|
type su_exec, exec_type, file_type;
|
|
domain_auto_trans(shell, su_exec, su)
|
|
|
|
# Allow dumpstate to call su on userdebug / eng builds to collect
|
|
# additional information.
|
|
domain_auto_trans(dumpstate, su_exec, su)
|
|
|
|
# su is unconfined.
|
|
unconfined_domain(su)
|
|
|
|
# su is also permissive to permit setenforce.
|
|
permissive su;
|