diff --git a/adbd.te b/adbd.te index b44cd98e13daf7e2120253d4f2aee1815bd7015e..c475a76f6b9b5c78d9185dea66d1dba25be5c09c 100644 --- a/adbd.te +++ b/adbd.te @@ -12,6 +12,9 @@ allow adbd shell:process noatsecure; # Set UID and GID to shell. Set supplementary groups. allow adbd self:capability { setuid setgid }; +# Drop capabilities from bounding set on user builds. +allow adbd self:capability setpcap; + # Create and use network sockets. net_domain(adbd)