| allow adbd self:{ socket vsock_socket } {create listen accept rw_socket_perms_no_ioctl}; | |
| # TODO(b/130668487): Label the vsock sockets. | |
| allow adbd unlabeled:{socket vsock_socket} rw_socket_perms_no_ioctl; | |
| allow adbd kernel:system module_request; | |
| recovery_only(` | |
| allow adbd tmpfs:dir w_dir_perms; | |
| allow adbd tmpfs:file create_file_perms; | |
| # TODO(b/130668487): Label the vsock sockets. | |
| allow su unlabeled:{ socket vsock_socket } rw_socket_perms_no_ioctl; | |
| ') |