selinux: add pstore

Used to record the Android log messages, then on reboot
provide a means to triage user-space actitivies leading
up to a panic. A companion to the pstore console logs.

Change-Id: I9b94ee3d5e94e0c4590ba8453b4ac1ebdfc7603f

1 files changed, 4 insertions, 1 deletions

diff --git a/shell.te b/shell.te
index 3e30adc..a69d475 100644
--- a/shell.te
+++ b/shell.te
@@ -9,9 +9,12 @@ net_domain(shell)
 # XXX Transition into its own domain?
 app_domain(shell)
 
-# logd access
+# logcat
 read_logd(shell)
 control_logd(shell)
+# logcat -L (directly, or via dumpstate)
+allow shell pstorefs:dir search;
+allow shell pstorefs:file r_file_perms;
 
 # read files in /data/anr
 allow shell anr_data_file:dir r_dir_perms;