commit f9ef05235bf58fa3a114a8f88cfc09520f35a788
author TreeHugger Robot <treehugger-gerrit@google.com> Wed Jun 07 11:25:10 2017 +0000
committer Android (Google) Code Review <android-gerrit@google.com> Wed Jun 07 11:25:11 2017 +0000
tree ef0e8ee650866946319cd975e24ffa078067b88b
parent 1488647808da198a8317bc5252b3e0d752af0a50
parent fb7fc4fd3d147b4cedb20bb4cc71a08bbdca57d0

Merge "Fix SELinux settings for tracing during boot."

private/atrace.te

diff --git a/private/atrace.te b/private/atrace.te
index 94d8483..8740b63 100644
--- a/private/atrace.te
+++ b/private/atrace.te
@@ -11,8 +11,11 @@
   allow atrace boottrace_data_file:dir search;
   allow atrace boottrace_data_file:file r_file_perms;
 
-  # atrace reads the files in /sys/kernel/debug/tracing/
+  # Allow atrace to access tracefs.
+  allow atrace debugfs_tracing:dir r_dir_perms;
   allow atrace debugfs_tracing:file r_file_perms;
+  allow atrace tracing_shell_writable:file rw_file_perms;
+  allow atrace debugfs_trace_marker:file getattr;
 
   # atrace sets debug.atrace.* properties
   set_prop(atrace, debug_prop)