From 570e5f43535878ed5776497f585abf5f5746ae44 Mon Sep 17 00:00:00 2001
From: Nick Kralevich <nnk@google.com>
Date: Sat, 11 Jan 2014 00:25:01 -0800
Subject: [PATCH] Move adbd into enforcing on user devices

Change-Id: Ic5aae78d575dba50d0a4bb78747da3ba4b81fb7b
---
 adbd.te | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/adbd.te b/adbd.te
index c475a76f6..a92d50597 100644
--- a/adbd.te
+++ b/adbd.te
@@ -1,7 +1,11 @@
 # adbd seclabel is specified in init.rc since
 # it lives in the rootfs and has no unique file type.
 type adbd, domain;
-permissive adbd;
+
+userdebug_or_eng(`
+  permissive adbd;
+')
+
 domain_auto_trans(adbd, shell_exec, shell)
 # this is an entrypoint
 allow adbd rootfs:file entrypoint;
-- 
GitLab