Sepolicy for dumsys suspend_control in bugreport

Kalesh Singh · Michael Bestas · commit 996e7442f0c0 · 2021-03-21T13:54:32.000+01:00
Bug: 155836352 Test: adb shell am bug-report && check logcat for denials Change-Id: I8b65ea7c798121679bf27ce667c787a8dcbf5aae (cherry picked from commit 215751a)
diff --git a/prebuilts/api/30.0/private/system_suspend.te b/prebuilts/api/30.0/private/system_suspend.te
@@ -16,6 +16,10 @@ r_dir_file(system_suspend, sysfs_wakeup)
 # To resolve arbitrary sysfs paths from /sys/class/wakeup/* symlinks.
 allow system_suspend sysfs_type:dir search;
 
+# For adding `dumpsys syspend_control` output to bugreport
+allow system_suspend dumpstate:fd use;
+allow system_suspend dumpstate:fifo_file write;
+
 neverallow {
     domain
     -atrace # tracing
diff --git a/private/system_suspend.te b/private/system_suspend.te
@@ -16,6 +16,10 @@ r_dir_file(system_suspend, sysfs_wakeup)
 # To resolve arbitrary sysfs paths from /sys/class/wakeup/* symlinks.
 allow system_suspend sysfs_type:dir search;
 
+# For adding `dumpsys syspend_control` output to bugreport
+allow system_suspend dumpstate:fd use;
+allow system_suspend dumpstate:fifo_file write;
+
 neverallow {
     domain
     -atrace # tracing
