fix ptracing of all domains

refpolicy/policy/modules/kernel/domain.if

@@ -85,10 +85,6 @@ interface(`domain_type',`
 		unconfined_sigchld($1)
 	')
 
-	tunable_policy(`allow_ptrace',`
-		userdom_sigchld_sysadm($1)
-	')
-
 	# allow any domain to connect to the LDAP server
 	optional_policy(`ldap',`
 		ldap_use($1)
@@ -615,6 +611,7 @@ interface(`domain_ptrace_all_domains',`
 	')
 
 	allow $1 domain:process ptrace;
+	allow domain $1:process sigchld;
 ')
 
 ########################################