From 0193620bece18ebda89c2c39eb4369b0116a0fdf Mon Sep 17 00:00:00 2001
From: Andreas Gampe <agampe@google.com>
Date: Mon, 19 Mar 2018 13:31:38 -0700
Subject: [PATCH] Sepolicy: Give system server fd rights to perfprofd

So that perfprofd can send larger packets to dropbox.

Follow-up of commit 3fa95acb1e3219652aa0f8d2a9269a9a785ef3b2.

(cherry picked from commit c9df843773e5dfe9d3c4a299e743c1c779a89337)

Bug: 73175642
Test: m
Test: manual
Merged-In: I88d1f83962243589909ff1ce3d02195e7c494256
Change-Id: I88d1f83962243589909ff1ce3d02195e7c494256
---
 private/system_server.te | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/private/system_server.te b/private/system_server.te
index 9a52bb656..b0aa9b5aa 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -381,6 +381,12 @@ allow system_server incident_data_file:file read;
 allow system_server perfetto_traces_data_file:file read;
 allow system_server perfetto:fd use;
 
+# Allow dropbox to read /data/misc/perfprofd. Only the fd is sent over binder.
+userdebug_or_eng(`
+  allow system_server perfprofd_data_file:file read;
+  allow system_server perfprofd:fd use;
+')
+
 # Manage /data/backup.
 allow system_server backup_data_file:dir create_dir_perms;
 allow system_server backup_data_file:file create_file_perms;
-- 
GitLab