Skip to content
Snippets Groups Projects
Commit 95e0842e authored by Stephen Smalley's avatar Stephen Smalley
Browse files

Restrict ptrace access by debuggerd and unconfineddomain.


Remove init, ueventd, watchdogd, healthd and adbd from the set of
domains traceable by debuggerd.  bionic/linker/debugger.cpp sets up
handlers for all dynamically linked programs in Android but this
should not apply for statically linked programs.

Exclude ptrace access from unconfineddomain.

Prohibit ptrace access to init via neverallow.

Change-Id: I70d742233fbe40cb4d1772a4e6cd9f8f767f2c3a
Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
parent 82fc3b52
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment