commit 6b3ef921034adda9411d111630797a36caea027a
author Nick Kralevich <nnk@google.com> Mon May 22 22:11:24 2017 +0000
committer android-build-merger <android-build-merger@google.com> Mon May 22 22:11:24 2017 +0000
tree b4d81a0d832bfe1d987e2a237d137bbe5bee8ac5
parent 429e71a6089f2fc283b6a09dca60e4fb57a9f90d
parent 5ee080531d6fe2a5a5a28bfaf258f2c2f312f243

system_server: replace sys_resource with sys_ptrace am: 3d8dde0e2e am: dddbd2f3ba
am: 5ee080531d

Change-Id: I530872c3d9a8ddf5a03353b27e75ea1043cd2ab2

system_server.te

diff --git a/system_server.te b/system_server.te
index 03a7ef3..db59b65 100644
--- a/system_server.te
+++ b/system_server.te
@@ -54,16 +54,13 @@
     net_raw
     sys_boot
     sys_nice
-    sys_resource
+    sys_ptrace
     sys_time
     sys_tty_config
 };
 
 wakelock_use(system_server)
 
-# Triggered by /proc/pid accesses, not allowed.
-dontaudit system_server self:capability sys_ptrace;
-
 # Trigger module auto-load.
 allow system_server kernel:system module_request;