diff --git a/public/logd.te b/public/logd.te
index e8d38618fca904d5f77cb24601ce6a7bc5ab90e2..6478123f01256db6cb55d26fb97675d0e3554b7f 100644
--- a/public/logd.te
+++ b/public/logd.te
@@ -43,3 +43,7 @@ neverallow logd system_file:dir_file_class_set write;
 
 # Write to files in /data/data or system files on /data
 neverallow logd { app_data_file system_data_file }:dir_file_class_set write;
+
+# Only init is allowed to enter the logd domain via exec()
+neverallow { domain -init } logd:process transition;
+neverallow * logd:process dyntransition;
diff --git a/public/logpersist.te b/public/logpersist.te
index 86eb0d3bed2b6750f19a65a8211dab672fb953c1..ab7d04b77799d1ca8f8b58d1feeb64afcae72abb 100644
--- a/public/logpersist.te
+++ b/public/logpersist.te
@@ -14,3 +14,7 @@ neverallow logpersist domain:process ptrace;
 
 # Write to files in /data/data or system files on /data except misc_logd_file
 neverallow logpersist { app_data_file system_data_file }:dir_file_class_set write;
+
+# Only init is allowed to enter the logpersist domain via exec()
+neverallow { domain -init } logpersist:process transition;
+neverallow * logpersist:process dyntransition;