diff --git a/private/traced_probes.te b/private/traced_probes.te index e6a3dfe32a04a7f38e145d6d4a25fb987911aa20..5d80f7e8b172939e748ae03c0a0469d0a796d8e6 100644 --- a/private/traced_probes.te +++ b/private/traced_probes.te @@ -37,17 +37,17 @@ allow traced_probes system_file:dir { open read }; # Allow traced_probes to list some of the data partition. allow traced_probes self:capability dac_read_search; -allow traced_probes apk_data_file:dir { getattr open read }; -allow traced_probes dalvikcache_data_file:dir { getattr open read }; +allow traced_probes apk_data_file:dir { getattr open read search }; +allow traced_probes dalvikcache_data_file:dir { getattr open read search }; userdebug_or_eng(` -allow traced_probes system_data_file:dir { getattr open read }; +allow traced_probes system_data_file:dir { getattr open read search }; ') -allow traced_probes system_app_data_file:dir { getattr open read }; -allow traced_probes backup_data_file:dir { getattr open read }; -allow traced_probes bootstat_data_file:dir { getattr open read }; -allow traced_probes update_engine_data_file:dir { getattr open read }; -allow traced_probes update_engine_log_data_file:dir { getattr open read }; -allow traced_probes user_profile_data_file:dir { getattr open read }; +allow traced_probes system_app_data_file:dir { getattr open read search }; +allow traced_probes backup_data_file:dir { getattr open read search }; +allow traced_probes bootstat_data_file:dir { getattr open read search }; +allow traced_probes update_engine_data_file:dir { getattr open read search }; +allow traced_probes update_engine_log_data_file:dir { getattr open read search }; +allow traced_probes user_profile_data_file:dir { getattr open read search }; # Allow traced_probes to run atrace. atrace pokes at system services to enable # their userspace TRACE macros.