1# debugger interface 2type debuggerd, domain; 3type debuggerd_exec, exec_type, file_type; 4 5init_daemon_domain(debuggerd) 6typeattribute debuggerd mlstrustedsubject; 7allow debuggerd self:capability { dac_override sys_ptrace chown kill fowner }; 8allow debuggerd self:capability2 { syslog }; 9allow debuggerd domain:dir r_dir_perms; 10allow debuggerd domain:file r_file_perms; 11allow debuggerd domain:process ptrace; 12allow debuggerd rootfs:file r_file_perms; 13allow debuggerd system_data_file:dir create_dir_perms; 14allow debuggerd system_data_file:dir relabelfrom; 15allow debuggerd tombstone_data_file:dir relabelto; 16allow debuggerd tombstone_data_file:dir create_dir_perms; 17allow debuggerd tombstone_data_file:file create_file_perms; 18allow debuggerd domain:process { sigstop signal }; 19allow debuggerd exec_type:file r_file_perms; 20allow debuggerd log_device:chr_file r_file_perms; 21