xref: /aosp_15_r20/system/sepolicy/prebuilts/api/202404/private/traceur_app.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290) 
1typeattribute traceur_app coredomain;
2
3app_domain(traceur_app);
4allow traceur_app debugfs_tracing:file rw_file_perms;
5allow traceur_app debugfs_tracing_debug:dir r_dir_perms;
6
7userdebug_or_eng(`
8  allow traceur_app debugfs_tracing_debug:file rw_file_perms;
9')
10
11allow traceur_app trace_data_file:file create_file_perms;
12allow traceur_app trace_data_file:dir rw_dir_perms;
13allow traceur_app wm_trace_data_file:dir rw_dir_perms;
14allow traceur_app wm_trace_data_file:file { getattr r_file_perms unlink };
15allow traceur_app atrace_exec:file rx_file_perms;
16
17# To exec the perfetto cmdline client and pass it the trace config on
18# stdint through a pipe.
19allow traceur_app perfetto_exec:file rx_file_perms;
20
21# Allow to access traced's privileged consumer socket.
22unix_socket_connect(traceur_app, traced_consumer, traced)
23
24dontaudit traceur_app debugfs_tracing_debug:file audit_access;
25
26set_prop(traceur_app, debug_prop)
27