aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNick Kralevich <nnk@google.com>2014-01-18 09:22:50 -0800
committerNick Kralevich <nnk@google.com>2014-01-18 09:22:50 -0800
commitc52c5b8e3d690201b2ae009a2d396d1899033e3d (patch)
tree403c132cbd671156409a5f500bf30419a5e50529
parent772f6e2a8865934bb57aaeea8354a75a47ee753f (diff)
downloadbootable_recovery-c52c5b8e3d690201b2ae009a2d396d1899033e3d.zip
bootable_recovery-c52c5b8e3d690201b2ae009a2d396d1899033e3d.tar.gz
bootable_recovery-c52c5b8e3d690201b2ae009a2d396d1899033e3d.tar.bz2
adbd: switch to su domain when running as root
When adbd runs as root, it should transition into the su domain. This is needed to run the adbd and shell domains in enforcing on userdebug / eng devices without breaking developer workflows. Use the new device_banner command line option. Change-Id: Ib33c0dd2dd6172035230514ac84fcaed2ecf44d6
-rw-r--r--etc/init.rc2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/init.rc b/etc/init.rc
index 8d49f24..159747e 100644
--- a/etc/init.rc
+++ b/etc/init.rc
@@ -59,7 +59,7 @@ service healthd /sbin/healthd -n
service recovery /sbin/recovery
seclabel u:r:recovery:s0
-service adbd /sbin/adbd recovery
+service adbd /sbin/adbd --root_seclabel=u:r:su:s0 --device_banner=recovery
disabled
socket adbd stream 660 system system
seclabel u:r:adbd:s0