Skip to content
Snippets Groups Projects
Commit d9339f16 authored by Jeff Vander Stoep's avatar Jeff Vander Stoep Committed by android-build-team Robot
Browse files

crash_dump: disallow ptrace of TCB components

Remove permissions and add neverallow assertion.

Bug: 110107376
Test: kill -6 <components excluded from ptrace>
Change-Id: If8b9c932af03a551e40e786d591544ecdd4e5c98
Merged-In: If8b9c932af03a551e40e786d591544ecdd4e5c98
(cherry picked from commit f1554f1588eab05eca7eb7ccba41d5955a563837)
(cherry picked from commit f0e6a70ab554c8e9fc80aa0f4ff5833ddd90d61b)
parent d58aa867
No related branches found
No related tags found
No related merge requests found
typeattribute crash_dump coredomain;
allow crash_dump {
domain
-crash_dump
-init
-kernel
-keystore
-logd
-ueventd
-vold
}:process { ptrace signal sigchld sigstop sigkill };
type crash_dump, domain;
type crash_dump_exec, exec_type, file_type;
allow crash_dump {
domain
-init
-crash_dump
-keystore
-logd
}:process { ptrace signal sigchld sigstop sigkill };
# crash_dump might inherit CAP_SYS_PTRACE from a privileged process,
# which will result in an audit log even when it's allowed to trace.
dontaudit crash_dump self:capability { sys_ptrace };
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment