xref: /aosp_15_r20/system/sepolicy/private/trace_redactor.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# Trace Redactor command line
2*e4a36f41SAndroid Build Coastguard Workertype trace_redactor_exec, system_file_type, exec_type, file_type;
3*e4a36f41SAndroid Build Coastguard Workertype trace_redactor, domain, coredomain;
4*e4a36f41SAndroid Build Coastguard Worker
5*e4a36f41SAndroid Build Coastguard Worker# Use pipes provided by system_server
6*e4a36f41SAndroid Build Coastguard Workerallow trace_redactor system_server:fd use;
7*e4a36f41SAndroid Build Coastguard Workerallow trace_redactor system_server:fifo_file { read write getattr ioctl };
8*e4a36f41SAndroid Build Coastguard Worker
9*e4a36f41SAndroid Build Coastguard Worker# Allow trace_redactor to read output trace file and write to new redacted file.
10*e4a36f41SAndroid Build Coastguard Workerallow trace_redactor perfetto_traces_profiling_data_file:dir search;
11*e4a36f41SAndroid Build Coastguard Workerallow trace_redactor perfetto_traces_data_file:dir search;
12*e4a36f41SAndroid Build Coastguard Workerallow trace_redactor perfetto_traces_data_file:file { read getattr ioctl };
13*e4a36f41SAndroid Build Coastguard Workerallow trace_redactor perfetto_traces_profiling_data_file:file rw_file_perms;
14