| commit | 208deb335719280c11ab0e6aa033bfd33629320a | [log] [tgz] |
|---|---|---|
| author | Stephen Smalley <sds@tycho.nsa.gov> | Wed Jan 29 14:56:41 2014 -0500 |
| committer | Stephen Smalley <sds@tycho.nsa.gov> | Wed Jan 29 14:57:08 2014 -0500 |
| tree | 0e902c66893882f5fd96b5e3cc208a6f7fa96735 | |
| parent | 997680a3b78db39cf442f80fd92d4eb93d0f262a [diff] [blame] |
Allow dumpstate to run am and shell. See http://code.google.com/p/android/issues/detail?id=65339 Further denials were observed in testing and allowed as well. Change-Id: I54e56bf5650b50b61e092a6dac45c971397df60f Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
diff --git a/system_server.te b/system_server.te index 06bca76..1971912 100644 --- a/system_server.te +++ b/system_server.te
@@ -104,6 +104,7 @@ binder_call(system_server, binderservicedomain) binder_call(system_server, appdomain) binder_call(system_server, healthd) +binder_call(system_server, dumpstate) binder_service(system_server) # Read /proc/pid files for Binder clients.