Gitiles
Code Review Sign In
gerrit.omnirom.org / android_system_sepolicy / 2d6fa723867f4610503b9a4a65fca4e59b474914
commit2d6fa723867f4610503b9a4a65fca4e59b474914[log] [tgz]
authorNick Kralevich <nnk@google.com>Wed Apr 27 12:32:36 2016 -0700
committerNick Kralevich <nnk@google.com>Wed Apr 27 12:32:36 2016 -0700
tree3fa753809e9962098b867724bbbd734ddc0b9ed8
parentebc72b6b0395fb6ba157b00a2dff69bcc66e5bd8 [diff]
don't allow debuggerd to ptrace itself.

It doesn't make any sense for debuggerd to ever attempt to ptrace
itself. A debuggerd crash can't be debugged via debuggerd.

Bug: 28399663
Change-Id: I710d474e89d121385ef423b7bed9673a90e0759b
1 file changed
tree: 3fa753809e9962098b867724bbbd734ddc0b9ed8
  1. tools/
  2. access_vectors
  3. adbd.te
  4. Android.mk
  5. app.te
  6. atrace.te
  7. attributes
  8. audioserver.te
  9. autoplay_app.te
  10. binderservicedomain.te
  11. blkid.te
  12. blkid_untrusted.te
  13. bluetooth.te
  14. bluetoothdomain.te
  15. boot_control_hal.te
  16. bootanim.te
  17. bootstat.te
  18. cameraserver.te
  19. clatd.te
  20. CleanSpec.mk
  21. debuggerd.te
  22. device.te
  23. dex2oat.te
  24. dhcp.te
  25. dnsmasq.te
  26. domain.te
  27. domain_deprecated.te
  28. drmserver.te
  29. dumpstate.te
  30. file.te
  31. file_contexts
  32. file_contexts_asan
  33. fingerprintd.te
  34. fs_use
  35. fsck.te
  36. fsck_untrusted.te
  37. gatekeeperd.te
  38. genfs_contexts
  39. global_macros
  40. gpsd.te
  41. hci_attach.te
  42. healthd.te
  43. hostapd.te
  44. idmap.te
  45. init.te
  46. initial_sid_contexts
  47. initial_sids
  48. inputflinger.te
  49. install_recovery.te
  50. installd.te
  51. ioctl_defines
  52. ioctl_macros
  53. isolated_app.te
  54. kernel.te
  55. keys.conf
  56. keystore.te
  57. lmkd.te
  58. logd.te
  59. mac_permissions.xml
  60. mdnsd.te
  61. mediacodec.te
  62. mediadrmserver.te
  63. mediaextractor.te
  64. mediaserver.te
  65. mls
  66. mls_macros
  67. MODULE_LICENSE_PUBLIC_DOMAIN
  68. mtp.te
  69. net.te
  70. netd.te
  71. neverallow_macros
  72. nfc.te
  73. NOTICE
  74. otapreopt_chroot.te
  75. perfprofd.te
  76. platform_app.te
  77. policy_capabilities
  78. port_contexts
  79. postinstall.te
  80. postinstall_dexopt.te
  81. ppp.te
  82. priv_app.te
  83. profman.te
  84. property.te
  85. property_contexts
  86. racoon.te
  87. radio.te
  88. README
  89. recovery.te
  90. recovery_persist.te
  91. recovery_refresh.te
  92. rild.te
  93. roles
  94. runas.te
  95. sdcardd.te
  96. seapp_contexts
  97. security_classes
  98. service.te
  99. service_contexts
  100. servicemanager.te
  101. sgdisk.te
  102. shared_relro.te
  103. shell.te
  104. slideshow.te
  105. su.te
  106. surfaceflinger.te
  107. system_app.te
  108. system_server.te
  109. te_macros
  110. tee.te
  111. toolbox.te
  112. tzdatacheck.te
  113. ueventd.te
  114. uncrypt.te
  115. untrusted_app.te
  116. update_engine.te
  117. update_verifier.te
  118. users
  119. vdc.te
  120. vold.te
  121. watchdogd.te
  122. wpa.te
  123. zygote.te