commit eff7d756e16deb724ff9900d5bbb83bbb932aeb1
author Jeffrey Vander Stoep <jeffv@google.com> Fri Jan 20 16:20:15 2023 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Fri Jan 20 16:20:15 2023 +0000
tree d5c4e30527aee34c1f0feb7c0ab00486e31b34d3
parent fa7661b454ba7122aa553a90d9dae57c5c598d67
parent 5a6c0a755d6d5d7bc66d581d03552ac119362775

Merge "runas_app: allow sigkill of untrusted_app"

private/runas_app.te

diff --git a/private/runas_app.te b/private/runas_app.te
index c1b354a..a5f47f4 100644
--- a/private/runas_app.te
+++ b/private/runas_app.te
@@ -14,7 +14,7 @@
 r_dir_file(runas_app, untrusted_app_all)
 
 # Allow lldb/ndk-gdb/simpleperf to ptrace attach to debuggable app processes.
-allow runas_app untrusted_app_all:process { ptrace signal sigstop };
+allow runas_app untrusted_app_all:process { ptrace sigkill signal sigstop };
 allow runas_app untrusted_app_all:unix_stream_socket connectto;
 
 # Allow executing system image simpleperf without a domain transition.