1# debugger interface 2type debuggerd, domain; 3type debuggerd_exec, exec_type, file_type; 4 5init_daemon_domain(debuggerd) 6typeattribute debuggerd mlstrustedsubject; 7allow debuggerd self:capability { dac_override sys_ptrace chown kill }; 8allow debuggerd domain:dir r_dir_perms; 9allow debuggerd domain:file r_file_perms; 10allow debuggerd domain:process ptrace; 11allow debuggerd tombstone_data_file:dir create_dir_perms; 12allow debuggerd tombstone_data_file:file create_file_perms; 13allow debuggerd domain:process { sigstop signal }; 14allow debuggerd exec_type:file r_file_perms; 15allow debuggerd log_device:chr_file r_file_perms; 16