diff --git a/private/domain_deprecated.te b/private/domain_deprecated.te
index c4aacb1c19de967ee14e80575f7446ad39f33c6b..3a846292dd9b771f837aeac67a1679e9ab726c4a 100644
--- a/private/domain_deprecated.te
+++ b/private/domain_deprecated.te
@@ -26,7 +26,7 @@ auditallow { domain_deprecated -appdomain -netd -surfaceflinger } system_server:
 # This is used for e.g. adb backup/restore.
 allow domain_deprecated adbd:fd use;
 userdebug_or_eng(`
-auditallow { domain_deprecated -appdomain -system_server } adbd:fd use;
+auditallow { domain_deprecated -appdomain -system_server -runas } adbd:fd use;
 ')
 
 # Root fs.
diff --git a/public/runas.te b/public/runas.te
index 7a7febfc04f870ae3b93333e73c3ddd52dcde814..12c418100bc4659259f3ae8f5ac75a1f5270c4da 100644
--- a/public/runas.te
+++ b/public/runas.te
@@ -1,6 +1,7 @@
 type runas, domain, mlstrustedsubject;
 type runas_exec, exec_type, file_type;
 
+allow runas adbd:fd use;
 allow runas adbd:process sigchld;
 allow runas adbd:unix_stream_socket { read write };
 allow runas shell:fd use;