Skip to content
Snippets Groups Projects
Commit 9678e079 authored by Carmen Jackson's avatar Carmen Jackson
Browse files

Add selinux rules for detachable perfetto process.

This appears to be the minimum change required to accommodate Traceur
running the detachable Perfetto process.

Bug: 116754732
Test: Started a perfetto trace using --detach and it started
successfully.

Change-Id: I12881ae343389abdcc74af5f11ecbac99b03ef7c
parent cd1c24f3
No related branches found
No related tags found
No related merge requests found
......@@ -19,7 +19,9 @@ allow traced self:global_capability_class_set { sys_nice };
# directly into that (rather than returning the trace contents over the socket).
allow traced perfetto:fd use;
allow traced shell:fd use;
allow traced traceur_app:fd use;
allow traced perfetto_traces_data_file:file { read write };
allow traced trace_data_file:file { read write };
###
### Neverallow rules
......@@ -53,6 +55,7 @@ neverallow traced {
data_file_type
-zoneinfo_data_file
-perfetto_traces_data_file
-trace_data_file
}:file ~write;
# Only init is allowed to enter the traced domain via exec()
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment