diff --git a/private/statsd.te b/private/statsd.te index 74b89c2427016bcbede4b4eb762e7b3509e4186d..834fb8b7784486d088dacfb53912f24caa1056a9 100644 --- a/private/statsd.te +++ b/private/statsd.te @@ -50,6 +50,9 @@ domain_auto_trans(statsd, perfetto_exec, perfetto) allow statsd { app_api_service incident_service + userdebug_or_eng(` + perfprofd_service + ') statscompanion_service system_api_service }:service_manager find; diff --git a/private/system_server.te b/private/system_server.te index 60d3718bfc491b7834899c910e61ae4b76dcd7a7..aab37fc8f92d201b60217993509c68f2398cc681 100644 --- a/private/system_server.te +++ b/private/system_server.te @@ -389,7 +389,7 @@ allow system_server perfetto:fd use; # Allow dropbox to read /data/misc/perfprofd. Only the fd is sent over binder. userdebug_or_eng(` - allow system_server perfprofd_data_file:file read; + allow system_server perfprofd_data_file:file { getattr read }; allow system_server perfprofd:fd use; ')