commit 3d52817da411821e7288c7c9d730fb42fc9a6e64
author Alexander Potapenko <glider@google.com> Tue Mar 02 16:46:50 2021 +0100
committer Alexander Potapenko <glider@google.com> Fri Mar 05 08:53:39 2021 +0100
tree 3af859f5635fd880618b3868bbe6f36a6bdc51f2
parent ae69347dbeacb243d7a77f02514a09e635f97387

Selinux policy for bootreceiver tracing instance

Create contexts for /sys/kernel/tracing/instances/bootreceiver
Allow read access to files in this dir for system_server.

Bug: 172316664
Bug: 181778620
Test: manual runs with KFENCE enabled
Signed-off-by: Alexander Potapenko <glider@google.com>
Change-Id: I7021a9f32b1392b9afb77294a1fd0a1be232b1f2

private/init.te

diff --git a/private/init.te b/private/init.te
index 348673b..4e8289a 100644
--- a/private/init.te
+++ b/private/init.te
@@ -83,3 +83,6 @@
 
 # Only init can set keystore.boot_level
 neverallow { -init } keystore_listen_prop:property_service set;
+
+# Allow accessing /sys/kernel/tracing/instances/bootreceiver to set up tracing.
+allow init debugfs_bootreceiver_tracing:file w_file_perms;