crash_dump: dontaudit CAP_SYS_PTRACE denial. am: 943d7ed5

am: d04a2dd0 Change-Id: I911532b7f4b82379005b3f78165ddc1bd4546b21

crash_dump: dontaudit CAP_SYS_PTRACE denial. am: 943d7ed5
c4bc8992 · Josh Gao · android-build-merger · 9805f2cd · d04a2dd0 · c4bc8992
Commit c4bc8992 authored 8 years ago by Josh Gao Committed by android-build-merger 8 years ago
--- a/public/crash_dump.te
+++ b/public/crash_dump.te
@@ -8,6 +8,11 @@ allow crash_dump {
  -keystore
  -logd
 }:process { ptrace signal sigchld sigstop sigkill };
+
+# crash_dump might inherit CAP_SYS_PTRACE from a privileged process,
+# which will result in an audit log even when it's allowed to trace.
+dontaudit crash_dump self:capability { sys_ptrace };
+
 userdebug_or_eng(`
  allow crash_dump logd:process { ptrace signal sigchld sigstop sigkill };
 ')