From a758a5cc3b8c673034c873d5c5e8200152891db0 Mon Sep 17 00:00:00 2001
From: Hridya Valsaraju <hridya@google.com>
Date: Wed, 17 Mar 2021 22:46:27 -0700
Subject: [PATCH] Allow dumpstate to read /dev/binderfs/binder_logs/proc

This patch fixes the following denial:
avc: denied { read } for name=\"1194\" dev=\"binder\" ino=1048790
 scontext=u:r:dumpstate:s0 tcontext=u:object_r:binderfs_logs_proc:s0 tclass=file permissive=0

Test: build
Bug: 182334323
Change-Id: I739f09f56763e3e7ac01dced6feda7a5a5fd2210
---
 public/dumpstate.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/public/dumpstate.te b/public/dumpstate.te
index 45540b33a..28bdb828d 100644
--- a/public/dumpstate.te
+++ b/public/dumpstate.te
@@ -370,6 +370,7 @@ allow dumpstate snapshotctl_log_data_file:file r_file_perms;
 #Allow access to /dev/binderfs/binder_logs
 allow dumpstate binderfs_logs:dir r_dir_perms;
 allow dumpstate binderfs_logs:file r_file_perms;
+allow dumpstate binderfs_logs_proc:file r_file_perms;
 
 allow dumpstate apex_info_file:file getattr;