1*e4a36f41SAndroid Build Coastguard Worker# adbd seclabel is specified in init.rc since 2*e4a36f41SAndroid Build Coastguard Worker# it lives in the rootfs and has no unique file type. 3*e4a36f41SAndroid Build Coastguard Workertype adbd, domain; 4*e4a36f41SAndroid Build Coastguard Workertype adbd_exec, exec_type, file_type, system_file_type; 5*e4a36f41SAndroid Build Coastguard Worker 6*e4a36f41SAndroid Build Coastguard Worker# Only init is allowed to enter the adbd domain via exec() 7*e4a36f41SAndroid Build Coastguard Workerneverallow { domain -init } adbd:process transition; 8*e4a36f41SAndroid Build Coastguard Workerneverallow * adbd:process dyntransition; 9*e4a36f41SAndroid Build Coastguard Worker 10*e4a36f41SAndroid Build Coastguard Worker# Access /data/local/tests. 11*e4a36f41SAndroid Build Coastguard Workerallow adbd shell_test_data_file:dir create_dir_perms; 12*e4a36f41SAndroid Build Coastguard Workerallow adbd shell_test_data_file:file create_file_perms; 13*e4a36f41SAndroid Build Coastguard Workerallow adbd shell_test_data_file:lnk_file create_file_perms; 14