commit 500637484bd7f25489036a9ac9520a18d16d7c2b
author Alistair Delva <adelva@google.com> Tue May 12 16:44:44 2020 -0700
committer Alistair Delva <adelva@google.com> Tue May 12 17:07:08 2020 -0700
tree b27877833762f61ee8bda3b22e2fcb43a00f4158
parent 69a8779646d416a43fa701e508ebf2c1c490aed4

Avoid denial on dumpstate

Cuttlefish uses a reference implementation of the neural networking HAL
called hal_neuralnetworks_sample, which is not included in public
sepolicy. This means when the dumpstate call is made to the server
process, it generates a denial.

This should fix failures with the CTS test:
android.security.cts.SELinuxHostTest#testNoBugreportDenials

Bug: 156418420
Change-Id: I2b1303192d3c98f2e092fc09588d11399ec0e168

shared/sepolicy/vendor/dumpstate.te

diff --git a/shared/sepolicy/vendor/dumpstate.te b/shared/sepolicy/vendor/dumpstate.te
new file mode 100644
index 0000000..34caf72
--- /dev/null
+++ b/shared/sepolicy/vendor/dumpstate.te
@@ -0,0 +1 @@
+allow dumpstate hal_neuralnetworks_sample:process signal;