diff --git a/private/atrace.te b/private/atrace.te index 94d84834d116ddf9020232f883f2fec997a1f2b8..8740b63c7ebc215ef3a0066a344f4e55dde0b47b 100644 --- a/private/atrace.te +++ b/private/atrace.te @@ -11,8 +11,11 @@ userdebug_or_eng(` allow atrace boottrace_data_file:dir search; allow atrace boottrace_data_file:file r_file_perms; - # atrace reads the files in /sys/kernel/debug/tracing/ + # Allow atrace to access tracefs. + allow atrace debugfs_tracing:dir r_dir_perms; allow atrace debugfs_tracing:file r_file_perms; + allow atrace tracing_shell_writable:file rw_file_perms; + allow atrace debugfs_trace_marker:file getattr; # atrace sets debug.atrace.* properties set_prop(atrace, debug_prop)