diff --git a/mediaserver.te b/mediaserver.te
index c6ec3ff2e79f983abba30d9c72dfbdc7cc2c2bcb..21f16f4d60336350f4378bddca2bbcbdd04882b7 100644
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -15,6 +15,11 @@ allow mediaserver proc:lnk_file getattr;
 # open /vendor/lib/mediadrm
 allow mediaserver system_file:dir r_dir_perms;
 
+userdebug_or_eng(`
+  # ptrace to processes in the same domain for memory leak detection
+  allow mediaserver self:process ptrace;
+')
+
 binder_use(mediaserver)
 binder_call(mediaserver, binderservicedomain)
 binder_call(mediaserver, { appdomain autoplay_app })