commit 9ba65f627b3f8e01f0b295176004023a27194989
author Treehugger Robot <treehugger-gerrit@google.com> Thu Apr 06 19:02:24 2023 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu Apr 06 19:02:24 2023 +0000
tree adb3c45703d217428dd75a82fe6aaaf0ee1cd14d
parent 035a1a9dfcbb9a62f558f1e288e728a0318c3ceb
parent 9fe0c21672bc6b17007a73ad91cf863c7c7a336e

Merge "allow systemserver to sigkill clat"

private/system_server.te

diff --git a/private/system_server.te b/private/system_server.te
index 154d6f8..7fea6e7 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -1188,7 +1188,7 @@
 
 # Allow system_server to start clatd in its own domain and kill it.
 domain_auto_trans(system_server, clatd_exec, clatd)
-allow system_server clatd:process signal;
+allow system_server clatd:process { sigkill signal };
 
 # ART Profiles.
 # Allow system_server to open profile snapshots for read.