Skip to content
Snippets Groups Projects
Commit f0e6a70a authored by Jeff Vander Stoep's avatar Jeff Vander Stoep Committed by Jeffrey Vander Stoep
Browse files

crash_dump: disallow ptrace of TCB components

Remove permissions and add neverallow assertion.

Bug: 110107376
Test: kill -6 <components excluded from ptrace>
Change-Id: If8b9c932af03a551e40e786d591544ecdd4e5c98
Merged-In: If8b9c932af03a551e40e786d591544ecdd4e5c98
(cherry picked from commit f1554f15)
parent a401c9f9
Branches
No related tags found
No related merge requests found
typeattribute crash_dump coredomain;
allow crash_dump {
domain
-crash_dump
-init
-kernel
-keystore
-logd
-ueventd
-vold
}:process { ptrace signal sigchld sigstop sigkill };
type crash_dump, domain;
type crash_dump_exec, exec_type, file_type;
allow crash_dump {
domain
-init
-crash_dump
-keystore
-logd
}:process { ptrace signal sigchld sigstop sigkill };
# crash_dump might inherit CAP_SYS_PTRACE from a privileged process,
# which will result in an audit log even when it's allowed to trace.
dontaudit crash_dump self:capability { sys_ptrace };
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment