tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Add selinux rules for detachable perfetto process."

Browse source 
am: 146be01a0f

Change-Id: Idc98dfb1b1dbbb0b75bcba24f97c7f313d0442a8
This commit is contained in:
Carmen Jackson 2019-01-14 14:05:12 -08:00 committed by android-build-merger
commit 48f1936058
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
private/traced.te
View file

@ -19,7 +19,9 @@ allow traced self:global_capability_class_set { sys_nice };
# directly into that (rather than returning the trace contents over the socket).
allow traced perfetto:fd use;
allow traced shell:fd use;
allow traced traceur_app:fd use;
allow traced perfetto_traces_data_file:file { read write };
allow traced trace_data_file:file { read write };
###
### Neverallow rules
@ -53,6 +55,7 @@ neverallow traced {
data_file_type
-zoneinfo_data_file
-perfetto_traces_data_file
-trace_data_file
}:file ~write;
# Only init is allowed to enter the traced domain via exec()