From c9df843773e5dfe9d3c4a299e743c1c779a89337 Mon Sep 17 00:00:00 2001
From: Andreas Gampe <agampe@google.com>
Date: Mon, 19 Mar 2018 13:31:38 -0700
Subject: [PATCH] Sepolicy: Give system server fd rights to perfprofd

So that perfprofd can send larger packets to dropbox.

Follow-up of commit 3fa95acb1e3219652aa0f8d2a9269a9a785ef3b2.

Bug: 73175642
Test: m
Test: manual
Change-Id: I88d1f83962243589909ff1ce3d02195e7c494256
---
 private/system_server.te | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/private/system_server.te b/private/system_server.te
index d1cb3e9ee..c126ca44c 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -379,6 +379,12 @@ allow system_server incident_data_file:file read;
 allow system_server perfetto_traces_data_file:file read;
 allow system_server perfetto:fd use;
 
+# Allow dropbox to read /data/misc/perfprofd. Only the fd is sent over binder.
+userdebug_or_eng(`
+  allow system_server perfprofd_data_file:file read;
+  allow system_server perfprofd:fd use;
+')
+
 # Manage /data/backup.
 allow system_server backup_data_file:dir create_dir_perms;
 allow system_server backup_data_file:file create_file_perms;
-- 
GitLab