1*e4a36f41SAndroid Build Coastguard Worker# adbd seclabel is specified in init.rc since 2*e4a36f41SAndroid Build Coastguard Worker# it lives in the rootfs and has no unique file type. 3*e4a36f41SAndroid Build Coastguard Workertype adbd, domain; 4*e4a36f41SAndroid Build Coastguard Workertype adbd_exec, exec_type, file_type, system_file_type; 5*e4a36f41SAndroid Build Coastguard Worker 6*e4a36f41SAndroid Build Coastguard Worker# Only init is allowed to enter the adbd domain via exec() 7*e4a36f41SAndroid Build Coastguard Workerneverallow { domain -init } adbd:process transition; 8*e4a36f41SAndroid Build Coastguard Workerneverallow * adbd:process dyntransition; 9*e4a36f41SAndroid Build Coastguard Worker 10*e4a36f41SAndroid Build Coastguard Worker# Allow adbd start/stop mdnsd via ctl.start 11*e4a36f41SAndroid Build Coastguard Workerset_prop(adbd, ctl_mdnsd_prop) 12