commit f0264fe2e9080ffd0151474b835e4ba793ab98cc
author Joel Galenson <jgalenson@google.com> Wed Jan 02 09:22:10 2019 -0800
committer Joel Galenson <jgalenson@google.com> Wed Jan 02 09:23:45 2019 -0800
tree 8540d85ac5a3348f9c40ebbf231adf1eb1802892
parent df9d78327603e68fd8057433c1b6758e324418d8

Allow dumpstate to read sysfs_loop files.

This prevents denials while taking a bugreport.

Bug: 116711254
Test: cts-tradefed run cts -m CtsSecurityHostTestCases -t
android.security.cts.SELinuxHostTest#testNoBugreportDenials

Change-Id: Ie190bfa62cf5aa172ebfff8bfd82dea2a7d1a016

public/dumpstate.te

diff --git a/public/dumpstate.te b/public/dumpstate.te
index cd3310a..1c8bbb1 100644
--- a/public/dumpstate.te
+++ b/public/dumpstate.te
@@ -90,6 +90,7 @@
 
 allow dumpstate {
   sysfs_dm
+  sysfs_loop
   sysfs_usb
   sysfs_zram
 }:file r_file_perms;