diff --git a/app.te b/app.te
index 37ab9a30569b9815e10642e3a304258cb1516568..c670c9dd818a8ddbad8c55da64bf9421a8e7a239 100644
--- a/app.te
+++ b/app.te
@@ -19,9 +19,6 @@ allow appdomain zygote:fd use;
 # valgrind needs mmap exec for zygote
 allow appdomain zygote_exec:file rx_file_perms;
 
-# gdbserver for ndk-gdb ptrace attaches to app process.
-allow appdomain self:process ptrace;
-
 # Read system properties managed by zygote.
 allow appdomain zygote_tmpfs:file read;
 
diff --git a/isolated_app.te b/isolated_app.te
index ef68986820b363262f20fe7741ec6ff97fdfd047..d9605539fc30b695fe933614236f357acc6c11d1 100644
--- a/isolated_app.te
+++ b/isolated_app.te
@@ -18,6 +18,13 @@ allow isolated_app app_data_file:file { read write getattr lock };
 allow isolated_app activity_service:service_manager find;
 allow isolated_app display_service:service_manager find;
 
+# Google Breakpad (crash reporter for Chrome) relies on ptrace
+# functionality. Without the ability to ptrace, the crash reporter
+# tool is broken.
+# b/20150694
+# https://code.google.com/p/chromium/issues/detail?id=475270
+allow isolated_app self:process ptrace;
+
 #####
 ##### Neverallow
 #####
diff --git a/untrusted_app.te b/untrusted_app.te
index c1ad3c6205a908a94da0c67258f1416948d8422a..e4f9938823e0b2fe3b08884cb1b58e16546a29f5 100644
--- a/untrusted_app.te
+++ b/untrusted_app.te
@@ -110,6 +110,9 @@ userdebug_or_eng(`
   allow untrusted_app perfprofd_data_file:dir r_dir_perms;
 ')
 
+# gdbserver for ndk-gdb ptrace attaches to app process.
+allow untrusted_app self:process ptrace;
+
 # Programs routinely attempt to scan through /system, looking
 # for files. Suppress the denials when they occur.
 dontaudit untrusted_app exec_type:file getattr;