xref: /aosp_15_r20/system/sepolicy/private/adbd_common.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1### ADB daemon common rules.
2### Put things here that are needed for both adbd proper and adbd in trade-in mode.
3
4# Connect to mdnsd via mdnsd socket.
5unix_socket_connect(adbd_common, mdnsd, mdnsd)
6
7# adbd probes for vsock support. Do not generate denials when
8# this occurs. (b/123569840)
9dontaudit adbd_common self:{ socket vsock_socket } create;
10
11# Allow adbd inside vm to forward vm's vsock.
12allow adbd_common self:vsock_socket { create_socket_perms_no_ioctl listen accept };
13
14# Access device logging gating property
15get_prop(adbd_common, device_logging_prop)
16
17# Use a pseudo tty.
18allow adbd_common devpts:chr_file rw_file_perms;
19
20# Read persist.adb.tls_server.enable property
21get_prop(adbd_common, system_adbd_prop)
22
23# Read whether or not Test Harness Mode is enabled
24get_prop(adbd_common, test_harness_prop)
25
26# Set service.adb.tcp.port, service.adb.tls.port, persist.adb.wifi.* properties
27set_prop(adbd_common, adbd_prop)
28set_prop(adbd_common, adbd_config_prop)
29
30# Read device's serial number from system properties
31get_prop(adbd_common, serialno_prop)
32