Allow dumpstate and shell to list services.

Addresses the following denials:
avc:  denied  { list } for service=NULL scontext=u:r:shell:s0 tcontext=u:r:servicemanager:s0 tclass=service_manager
avc:  denied  { list } for service=NULL scontext=u:r:dumpstate:s0 tcontext=u:r:servicemanager:s0 tclass=service_manager

Bug: 18864737
Change-Id: I72bd2cd9663f1df9410c2139411038fa997bf1b4

1 files changed, 3 insertions, 0 deletions

diff --git a/shell.te b/shell.te
index 00e991b..3e30adc 100644
--- a/shell.te
+++ b/shell.te
@@ -55,3 +55,6 @@ allow shell debugfs:file r_file_perms;
 
 # allow shell to run dmesg
 allow shell kernel:system syslog_read;
+
+# allow shell to list services
+allow shell servicemanager:service_manager list;