Skip to content
Snippets Groups Projects
Commit 51dc7cb1 authored by Primiano Tucci's avatar Primiano Tucci
Browse files

Allow perfetto traced_probes to poll /proc/{meminfo,stat,vmstat,...}

This allows the trace producer daemon to snapshot counters at
high frequency in the trace. As usual for Perfetto, this data is
NOT made available to arbitrary apps but only to an extremely
limited subset of processes governed by selinux rules (currently
shell and statsd).

Bug: 115956288
Change-Id: I7e1bfda4b568b9bac9012b198ecbb998da4f773d
parent ca4217e2
No related branches found
No related tags found
No related merge requests found
......@@ -57,6 +57,15 @@ domain_auto_trans(traced_probes, atrace_exec, atrace);
# scontext=u:r:atrace:s0 tcontext=u:r:traced_probes:s0 tclass=fd
allow atrace traced_probes:fd use;
# Allow traced_probes to access /proc files for system stats.
# Note: trace data is NOT exposed to anything other than shell and privileged
# system apps that have access to the traced consumer socket.
allow traced_probes {
proc_meminfo
proc_vmstat
proc_stat
}:file r_file_perms;
###
### Neverallow rules
###
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment