Further refined service_manager auditallow statements.
Further refined auditallow statements associated with
service_manager and added dumpstate to the
service_manager_local_audit_domain.
Change-Id: I2ecc42c8660de6a91f3b4e56268344fbd069ccc0
diff --git a/dumpstate.te b/dumpstate.te
index 279fd98..242cb93 100644
--- a/dumpstate.te
+++ b/dumpstate.te
@@ -96,3 +96,18 @@
# Read network state info files.
allow dumpstate net_data_file:dir search;
allow dumpstate net_data_file:file r_file_perms;
+
+service_manager_local_audit_domain(dumpstate)
+auditallow dumpstate {
+ service_manager_type
+ -drmserver_service
+ -healthd_service
+ -inputflinger_service
+ -keystore_service
+ -mediaserver_service
+ -nfc_service
+ -radio_service
+ -surfaceflinger_service
+ -system_app_service
+ -system_server_service
+}:service_manager find;