Merge "runas_app: allow sigkill of untrusted_app"

This commit is contained in:
Jeffrey Vander Stoep 2023-01-20 16:20:15 +00:00 committed by Gerrit Code Review
commit eff7d756e1

View file

@ -14,7 +14,7 @@ allow runas_app app_data_file:file execute_no_trans;
r_dir_file(runas_app, untrusted_app_all)
# Allow lldb/ndk-gdb/simpleperf to ptrace attach to debuggable app processes.
allow runas_app untrusted_app_all:process { ptrace signal sigstop };
allow runas_app untrusted_app_all:process { ptrace sigkill signal sigstop };
allow runas_app untrusted_app_all:unix_stream_socket connectto;
# Allow executing system image simpleperf without a domain transition.