diff --git a/adbd.te b/adbd.te
index 3b654a152d9aae89605d94befb23970064a1303c..a9a635528855c0ee10d75840b7be8a502aef0908 100644
--- a/adbd.te
+++ b/adbd.te
@@ -1,6 +1,6 @@
 # adbd seclabel is specified in init.rc since
 # it lives in the rootfs and has no unique file type.
-type adbd, domain;
+type adbd, domain, mlstrustedsubject;
 
 userdebug_or_eng(`
   allow adbd self:process setcurrent;
diff --git a/file.te b/file.te
index 7df06d3989527215c0d66af33d7aafab2d172738..0721c3230fa19703ab9457d7a0a508a990faedf7 100644
--- a/file.te
+++ b/file.te
@@ -133,8 +133,8 @@ type installd_socket, file_type;
 type lmkd_socket, file_type;
 type logd_debug, file_type;
 type logd_socket, file_type;
-type logdr_socket, file_type;
-type logdw_socket, file_type;
+type logdr_socket, file_type, mlstrustedobject;
+type logdw_socket, file_type, mlstrustedobject;
 type mdns_socket, file_type;
 type mdnsd_socket, file_type;
 type mtpd_socket, file_type;
diff --git a/logd.te b/logd.te
index cde721a6de309e6d6188ed47a6189f9b92544781..ca6719a61f49be6d5221e81deff8ef45c4ba2f0e 100644
--- a/logd.te
+++ b/logd.te
@@ -1,5 +1,5 @@
 # android user-space log manager
-type logd, domain;
+type logd, domain, mlstrustedsubject;
 type logd_exec, exec_type, file_type;
 
 init_daemon_domain(logd)
diff --git a/mdnsd.te b/mdnsd.te
index 7e14b529b8d6eef12d91b48d89e1a6899321d453..e5fe1e25866b06279b983ff9cacc5392b446da10 100644
--- a/mdnsd.te
+++ b/mdnsd.te
@@ -1,5 +1,5 @@
 # mdns daemon
-type mdnsd, domain;
+type mdnsd, domain, mlstrustedsubject;
 type mdnsd_exec, exec_type, file_type;
 
 init_daemon_domain(mdnsd)
diff --git a/netd.te b/netd.te
index 81275a77a19fc40853f3b46e41266218323172ce..ce894210e39b66fde1e3766ba611d901431de3d9 100644
--- a/netd.te
+++ b/netd.te
@@ -1,5 +1,5 @@
 # network manager
-type netd, domain;
+type netd, domain, mlstrustedsubject;
 type netd_exec, exec_type, file_type;
 
 init_daemon_domain(netd)
diff --git a/servicemanager.te b/servicemanager.te
index d20872c617661811ab9df19d63efc4eaf2bbea49..9947aa7d0f9e33412245ba97a14feb15e22782bf 100644
--- a/servicemanager.te
+++ b/servicemanager.te
@@ -1,5 +1,5 @@
 # servicemanager - the Binder context manager
-type servicemanager, domain;
+type servicemanager, domain, mlstrustedsubject;
 type servicemanager_exec, exec_type, file_type;
 
 init_daemon_domain(servicemanager)