diff --git a/debuggerd.te b/debuggerd.te index 95fff1b227036673a4fdfd087bdbbbbdf65795c9..576c76f335f65a926bab2319563e62f1cf10905a 100644 --- a/debuggerd.te +++ b/debuggerd.te @@ -4,17 +4,14 @@ type debuggerd_exec, exec_type, file_type; init_daemon_domain(debuggerd) typeattribute debuggerd mlstrustedsubject; -allow debuggerd self:capability { dac_override sys_ptrace chown kill fowner }; +allow debuggerd self:capability { dac_override sys_ptrace chown kill fowner setuid setgid }; allow debuggerd self:capability2 { syslog }; allow debuggerd domain:dir r_dir_perms; allow debuggerd domain:file r_file_perms; allow debuggerd domain:lnk_file read; allow debuggerd { domain -init -ueventd -watchdogd -healthd -adbd -keystore }:process { ptrace getattr }; security_access_policy(debuggerd) -allow debuggerd system_data_file:dir create_dir_perms; -allow debuggerd system_data_file:dir relabelfrom; -allow debuggerd tombstone_data_file:dir relabelto; -allow debuggerd tombstone_data_file:dir create_dir_perms; +allow debuggerd tombstone_data_file:dir rw_dir_perms; allow debuggerd tombstone_data_file:file create_file_perms; allow debuggerd shared_relro_file:dir r_dir_perms; allow debuggerd shared_relro_file:file r_file_perms;