1# adbd seclabel is specified in init.rc since
2# it lives in the rootfs and has no unique file type.
3type adbd, domain;
4type adbd_exec, exec_type, file_type, system_file_type;
5
6# Only init is allowed to enter the adbd domain via exec()
7neverallow { domain -init } adbd:process transition;
8neverallow * adbd:process dyntransition;
9
10# Allow adbd start/stop mdnsd via ctl.start
11set_prop(adbd, ctl_mdnsd_prop)
12