commit d0b151e97e2a6a09e38293c7c620463e60a6ce5d
author Cody Schuffelen <schuffelen@google.com> Mon Apr 15 16:41:10 2019 -0700
committer Cody Schuffelen <schuffelen@google.com> Tue Apr 16 15:32:54 2019 -0700
tree 9e900555121db7df1fbe884572a444083d07ddeb
parent d7a7435fde5f48ebd9e41d585c381ecbee0d5a25

Support unlabeled vsock sockets for adbd.

The connections that come in from the host are currently unlabeled.

Bug: 130376148
Change-Id: I087b36f50375d91f6e2de87b77795c24181b21ba

shared/sepolicy/adbd.te

diff --git a/shared/sepolicy/adbd.te b/shared/sepolicy/adbd.te
index 60598f0..92cfb18 100644
--- a/shared/sepolicy/adbd.te
+++ b/shared/sepolicy/adbd.te
@@ -1,3 +1,4 @@
 allow adbd self:{ socket vsock_socket } {create listen accept rw_socket_perms_no_ioctl};
-allow adbd unlabeled:socket rw_socket_perms_no_ioctl;
+# TODO(b/130668487): Label the vsock sockets.
+allow adbd unlabeled:{socket vsock_socket} rw_socket_perms_no_ioctl;
 allow adbd kernel:system module_request;