commit 146be01a0f975a2ac919269880e68ef7369110cc
author Treehugger Robot <treehugger-gerrit@google.com> Mon Jan 14 20:24:32 2019 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Mon Jan 14 20:24:32 2019 +0000
tree 4cf1734ffe45392ca92ee53c4fb7e0f16d612f8c
parent 0eb6bff5f35cafe18cf358a28139ec0cc25ace91
parent 9678e079ac8eee813e8c918664df07e0bcd340be

Merge "Add selinux rules for detachable perfetto process."

private/traced.te

diff --git a/private/traced.te b/private/traced.te
index 6571938..33c5ac0 100644
--- a/private/traced.te
+++ b/private/traced.te
@@ -19,7 +19,9 @@
 # directly into that (rather than returning the trace contents over the socket).
 allow traced perfetto:fd use;
 allow traced shell:fd use;
+allow traced traceur_app:fd use;
 allow traced perfetto_traces_data_file:file { read write };
+allow traced trace_data_file:file { read write };
 
 ###
 ### Neverallow rules
@@ -53,6 +55,7 @@
   data_file_type
   -zoneinfo_data_file
   -perfetto_traces_data_file
+  -trace_data_file
 }:file ~write;
 
 # Only init is allowed to enter the traced domain via exec()