SecurityServer::AccessProvider ap(peerCredentials.label());
ap.addObjectRule("System", "w");
ap.addObjectRule("System::Run", "x");
- ap.addObjectRule("System::Shared", "x"); // for GDB
+ ap.addObjectRule("System::Shared", "rwx"); // for GDB
+ ap.addSubjectRule("System::Privileged", "rwx"); // for piping
+ ap.addObjectRule("System::Privileged", "rwx"); // for GDB and piping
ap.addObjectRule("User", "r"); // for /usr/lib/debug access
ap.applyAndSwithToUser(peerCredentials.uid(), peerCredentials.gid());
pipe.claimChildEp();