Merge "Sepolicy: Silence /data/local/tmp access of perfprofd" am: 61f5f287 am: 95e3e7c5

am: ae49e574

Change-Id: Ibca867da2a61e2fb03c8b5b5915a587ba7b732ab

public/perfprofd.te

@@ -56,4 +56,10 @@ userdebug_or_eng(`
   # needed for simpleperf on some kernels
   allow perfprofd self:global_capability_class_set ipc_lock;
 
+  # simpleperf attempts to put a temp file into /data/local/tmp. Do not allow,
+  # use the fallback cwd code, do not spam the log. But ensure this is correctly
+  # removed at some point. b/70232908.
+  dontaudit perfprofd shell_data_file:dir *;
+  dontaudit perfprofd shell_data_file:file *;
+
 ')