diff --git a/system_server.te b/system_server.te index d0cb2298cd4a02af17ea5936a7b482edf0eb8ce0..eae67ed91a9de330aaeedbca9ae8629956e0a922 100644 --- a/system_server.te +++ b/system_server.te @@ -443,6 +443,12 @@ userdebug_or_eng(` allow system_server vold:fd use; allow system_server fuse_device:chr_file { read write ioctl }; +# Connect to adbd and use a socket transferred from it. +# Used for e.g. jdwp. +allow system_server adbd:unix_stream_socket connectto; +allow system_server adbd:fd use; +allow system_server adbd:unix_stream_socket { getattr getopt ioctl read write shutdown }; + ### ### Neverallow rules ###