diff --git a/private/ephemeral_app.te b/private/ephemeral_app.te
index 7694739..dbfbcf9 100644
--- a/private/ephemeral_app.te
+++ b/private/ephemeral_app.te
@@ -35,6 +35,12 @@
 allow ephemeral_app radio_service:service_manager find;
 allow ephemeral_app ephemeral_app_api_service:service_manager find;
 
+# Write app-specific trace data to the Perfetto traced damon. This requires
+# connecting to its producer socket and obtaining a (per-process) tmpfs fd.
+allow ephemeral_app traced:fd use;
+allow ephemeral_app traced_tmpfs:file { read write getattr map };
+unix_socket_connect(ephemeral_app, traced_producer, traced)
+
 ###
 ### neverallow rules
 ###