diff --git a/private/system_server.te b/private/system_server.te
index 849ce0a6904c2dc2ca520f761ea3f7888a402b31..7b95600278207bd1b63172c8553004e36e0fdff4 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -95,7 +95,7 @@ allow system_server self:socket create_socket_perms_no_ioctl;
 allow system_server self:netlink_route_socket nlmsg_write;
 
 # Kill apps.
-allow system_server appdomain:process { sigkill signal };
+allow system_server appdomain:process { getpgid sigkill signal };
 
 # Set scheduling info for apps.
 allow system_server appdomain:process { getsched setsched };
diff --git a/public/init.te b/public/init.te
index e293cefd53f61bac035b100d3234291e266a6b69..699e641b1c21c5d7f521191b6274eacfd6bcc4ca 100644
--- a/public/init.te
+++ b/public/init.te
@@ -270,7 +270,7 @@ allow init misc_logd_file:file { open create getattr setattr write };
 
 # Support "adb shell stop"
 allow init self:capability kill;
-allow init domain:process { sigkill signal };
+allow init domain:process { getpgid sigkill signal };
 
 # Init creates keystore's directory on boot, and walks through
 # the directory as part of a recursive restorecon.