commit 3b9fd5ffcd3badffc08e3e71ba4cc41d3a73c9e4
author Alex Klyubin <klyubin@google.com> Thu May 09 17:03:16 2013 -0700
committer Alex Klyubin <klyubin@google.com> Fri May 10 00:30:23 2013 +0000
tree 7344943e51edb58bb7a71813982af76b5ded0de3
parent 77ec892be6b59e2808cc4c3472bf179d33851ebe

SELinux policy: let adbd drop Linux capabilities.

Change-Id: Id41891b89c7b067919cbda06ab97d5eff2ad044f

adbd.te

diff --git a/adbd.te b/adbd.te
index c565bd7..8420298 100644
--- a/adbd.te
+++ b/adbd.te
@@ -3,7 +3,7 @@
 type adbd, domain, mlstrustedsubject;
 allow adbd adb_device:chr_file rw_file_perms;
 allow adbd qemu_device:chr_file rw_file_perms;
-allow adbd self:capability { net_raw setgid setuid dac_override sys_boot sys_admin };
+allow adbd self:capability { net_raw setgid setuid setpcap dac_override sys_boot sys_admin };
 allow adbd rootfs:file { r_file_perms entrypoint };
 allow adbd init:process sigchld;
 allow adbd self:tcp_socket *;