platform_system_sepolicy/private/crash_dump.te
Jeff Vander Stoep 573d333589 crash_dump: disallow ptrace of TCB components
Remove permissions.

Bug: 110107376
Test: kill -6 <components excluded from ptrace>
Change-Id: If8b9c932af03a551e40e786d591544ecdd4e5c98
Merged-In: If8b9c932af03a551e40e786d591544ecdd4e5c98
(cherry picked from commit f1554f1588)
2018-07-12 11:33:30 -07:00

14 lines
218 B
Text

typeattribute crash_dump coredomain;
allow crash_dump {
domain
-bpfloader
-crash_dump
-init
-kernel
-keystore
-logd
-ueventd
-vendor_init
-vold
}:process { ptrace signal sigchld sigstop sigkill };