diff --git a/app.te b/app.te
index 827a3be9f25cd96b7f7621b5183db35263354a5a..d03b9aa8626ee4a1429df0cd38d5bddfd7c0cf57 100644
--- a/app.te
+++ b/app.te
@@ -19,7 +19,7 @@ allow appdomain zygote:fd use;
 allow appdomain zygote_exec:file rx_file_perms;
 
 # gdbserver for ndk-gdb ptrace attaches to app process.
-allow appdomain self:process ptrace;
+allow { appdomain -isolated_app } self:process ptrace;
 
 # Read system properties managed by zygote.
 allow appdomain zygote_tmpfs:file read;