From e01646719a5c90060b9c043275890cf2736afa89 Mon Sep 17 00:00:00 2001
From: Steve Kondik <steve@cyngn.com>
Date: Sun, 29 Nov 2015 05:28:14 -0800
Subject: [PATCH] sepolicy: Allow adb pull of executables without root

 * Because we aren't actually jerks, contrary to popular belief.

Change-Id: Ie39cce65ecc6a2861547865ff554b108b8b534fa
---
 sepolicy/qcom/adbd.c | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 sepolicy/qcom/adbd.c

diff --git a/sepolicy/qcom/adbd.c b/sepolicy/qcom/adbd.c
new file mode 100644
index 00000000..d6109174
--- /dev/null
+++ b/sepolicy/qcom/adbd.c
@@ -0,0 +1,14 @@
+# Allow pulling various binaries without root
+# (cause we're awesome like that)
+
+allow adbd adsprpcd_exec:file r_file_perms;
+allow adbd location_exec:file r_file_perms;
+allow adbd mm-qcamerad_exec:file r_file_perms;
+allow adbd mpdecision_exec:file r_file_perms;
+allow adbd perfd_exec:file r_file_perms;
+allow adbd rfs_access_exec:file r_file_perms;
+allow adbd rmt_storage_exec:file r_file_perms;
+allow adbd sensors_exec:file r_file_perms;
+allow adbd tee_exec:file r_file_perms;
+allow adbd thermal-engine_exec:file r_file_perms;
+allow adbd time_daemon_exec:file r_file_perms;