tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Exclude isolated_app from ptrace self.

Browse source 
Change-Id: I29136a805d2329806afc9d5d81af934a1803d8e0
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
This commit is contained in:
Stephen Smalley 2014-10-03 09:24:59 -04:00 committed by Nick Kralevich
parent 38936af0f5
commit e9623d8fe6
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app.te
View file

@ -19,7 +19,7 @@ allow appdomain zygote:fd use;
allow appdomain zygote_exec:file rx_file_perms;
# gdbserver for ndk-gdb ptrace attaches to app process.
allow appdomain self:process ptrace;
allow { appdomain -isolated_app } self:process ptrace;
# Read system properties managed by zygote.
allow appdomain zygote_tmpfs:file read;