platform_system_sepolicy/public/usbd.te

type usbd, domain;
type usbd_exec, system_file_type, exec_type, file_type;

# Start/stop adbd via ctl.start adbd
set_prop(usbd, ctl_adbd_prop)
usbd sepolicy Sepolicy for the usb daemon. (ag/3373886/) Bug: 63669128 Test: Checked for avc denial messages. Change-Id: I6e2a4ccf597750c47e1ea90c4d43581de4afa4af 2017-12-03 23:23:16 +01:00			`type usbd, domain;`
Introduce system_file_type system_file_type is a new attribute used to identify files which exist on the /system partition. It's useful for allow rules in init, which are based off of a blacklist of writable files. Additionally, it's useful for constructing neverallow rules to prevent regressions. Additionally, add commented out tests which enforce that all files on the /system partition have the system_file_type attribute. These tests will be uncommented in a future change after all the device-specific policies are cleaned up. Test: Device boots and no obvious problems. Change-Id: Id9bae6625f042594c8eba74ca712abb09702c1e5 2018-09-27 19:21:37 +02:00			`type usbd_exec, system_file_type, exec_type, file_type;`
usbd sepolicy Sepolicy for the usb daemon. (ag/3373886/) Bug: 63669128 Test: Checked for avc denial messages. Change-Id: I6e2a4ccf597750c47e1ea90c4d43581de4afa4af 2017-12-03 23:23:16 +01:00
Revert "Revert "Reduce the number of processes that can start adbd"" This reverts commit b5dc6137adf0c5ced252c6bedc48b00317e0a4e0. Reason for revert: Reverted incorrect change Change-Id: Ieafa3338e28ffeed40bcceb73486cffbfbd08b9d 2018-06-26 21:52:21 +02:00			`# Start/stop adbd via ctl.start adbd`
			`set_prop(usbd, ctl_adbd_prop)`