From 26ce838838c3aadd3b4adde7bfd3667b14bbdd48 Mon Sep 17 00:00:00 2001
From: Steven Moreland <smoreland@google.com>
Date: Tue, 11 Apr 2017 00:07:04 +0000
Subject: [PATCH] Revert "Remove unnecessary adbd permissions."

This reverts commit 97848f0516299b3744183069eeb770f9049fa6d6.

Reason for revert: b/37218817

Change-Id: I3280be8873d60d66852b4f01f4af4eeaee6b5502
---
 private/adbd.te | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/private/adbd.te b/private/adbd.te
index 5fa83e2d3..b402335a2 100644
--- a/private/adbd.te
+++ b/private/adbd.te
@@ -63,6 +63,15 @@ get_prop(adbd, serialno_prop)
 # Run /system/bin/bu
 allow adbd system_file:file rx_file_perms;
 
+# Perform binder IPC to surfaceflinger (screencap)
+# XXX Run screencap in a separate domain?
+binder_use(adbd)
+binder_call(adbd, surfaceflinger)
+# b/13188914
+allow adbd gpu_device:chr_file rw_file_perms;
+allow adbd ion_device:chr_file rw_file_perms;
+r_dir_file(adbd, system_file)
+
 # Needed for various screenshots
 hal_client_domain(adbd, hal_graphics_allocator)
 
-- 
GitLab