diff --git a/private/domain_deprecated.te b/private/domain_deprecated.te
index 43f11357b..597348576 100644
--- a/private/domain_deprecated.te
+++ b/private/domain_deprecated.te
@@ -25,7 +25,7 @@ auditallow { domain_deprecated -appdomain -netd -surfaceflinger } system_server:
 # This is used for e.g. adb backup/restore.
 allow domain_deprecated adbd:fd use;
 userdebug_or_eng(`
-auditallow { domain_deprecated -appdomain -system_server } adbd:fd use;
+auditallow { domain_deprecated -appdomain -system_server -runas } adbd:fd use;
 ')
 
 # Root fs.
diff --git a/public/runas.te b/public/runas.te
index 7a7febfc0..12c418100 100644
--- a/public/runas.te
+++ b/public/runas.te
@@ -1,6 +1,7 @@
 type runas, domain, mlstrustedsubject;
 type runas_exec, exec_type, file_type;
 
+allow runas adbd:fd use;
 allow runas adbd:process sigchld;
 allow runas adbd:unix_stream_socket { read write };
 allow runas shell:fd use;