domain.te: allow access to /sys/kernel/debug/tracing/trace_marker
Bug: 9781325
Change-Id: Ib6f6875f690420b59fceb0a32590a2b9ed8dda95
diff --git a/domain.te b/domain.te
index 9ca6dc4..4cf20ea 100644
--- a/domain.te
+++ b/domain.te
@@ -108,14 +108,8 @@
r_dir_file(domain, cgroup)
# debugfs access
-bool debugfs false;
-if (debugfs) {
allow domain debugfs:dir r_dir_perms;
-allow domain debugfs:file rw_file_perms;
-} else {
-dontaudit domain debugfs:dir r_dir_perms;
-dontaudit domain debugfs:file rw_file_perms;
-}
+allow domain debugfs:file w_file_perms;
# security files
allow domain security_file:dir { search getattr };