diff --git a/adbd.te b/adbd.te
index c475a76f6b9b5c78d9185dea66d1dba25be5c09c..a92d50597a1c446903961c74321038fb346aba76 100644
--- a/adbd.te
+++ b/adbd.te
@@ -1,7 +1,11 @@
 # adbd seclabel is specified in init.rc since
 # it lives in the rootfs and has no unique file type.
 type adbd, domain;
-permissive adbd;
+
+userdebug_or_eng(`
+  permissive adbd;
+')
+
 domain_auto_trans(adbd, shell_exec, shell)
 # this is an entrypoint
 allow adbd rootfs:file entrypoint;