Sepolicy: Silence /data/local/tmp access of perfprofd
Until simpleperf does not optimistically try /data/local/tmp for
tmp storage, silence the denials.
Bug: 70232908
Test: m
Test: manual
Change-Id: Icbc230dbfbfa6493b4e494185c536a10e3b0ae7b
diff --git a/public/perfprofd.te b/public/perfprofd.te
index 578391c..6ef600b 100644
--- a/public/perfprofd.te
+++ b/public/perfprofd.te
@@ -56,4 +56,10 @@
# needed for simpleperf on some kernels
allow perfprofd self:global_capability_class_set ipc_lock;
+ # simpleperf attempts to put a temp file into /data/local/tmp. Do not allow,
+ # use the fallback cwd code, do not spam the log. But ensure this is correctly
+ # removed at some point. b/70232908.
+ dontaudit perfprofd shell_data_file:dir *;
+ dontaudit perfprofd shell_data_file:file *;
+
')