data/configs/apparmor_profiles/adbd

   1 profile adbd flags=(attach_disconnected,mediate_deleted,complain) {
   2   #include <local/adbd>
   3   /** ix,
   4   /dev** rw,
   5   network,
   6   unix,
   7   owner /proc** rw,
   8   / r,
   9   /** r,
  10   /storage** rwkl,
  11   /data** rwkl,
  12   /proc** rw,
  13   /sys** rw,
  14   /dev** rw,
  15   /tmp** rw,
  16   /var** rw,
  17   /run** rw,
  18   /mnt** rw,
  19   /apex** rw,
  20   mount,
  21   umount,
  22
  23   capability sys_nice,
  24   capability wake_alarm,
  25   capability setpcap,
  26   capability setgid,
  27   capability setuid,
  28   capability sys_ptrace,
  29   capability sys_admin,
  30   capability wake_alarm,
  31   capability block_suspend,
  32   capability sys_time,
  33   capability net_admin,
  34   capability net_raw,
  35   capability net_bind_service,
  36   capability kill,
  37   capability dac_override,
  38   capability dac_read_search,
  39   capability fsetid,
  40   capability mknod,
  41   capability syslog,
  42   capability chown,
  43   capability sys_resource,
  44   capability fowner,
  45
  46   ptrace (read,readby,trace,tracedby) peer=lxc-waydroid,
  47   ptrace (read,readby,trace,tracedby) peer=android_app//&lxc-waydroid,
  48   ptrace (read,readby,trace,tracedby) peer=adbd//&lxc-waydroid,
  49
  50   signal (send,receive) peer=lxc-waydroid,
  51   signal (send,receive) peer=android_app//&lxc-waydroid,
  52   signal (send) peer=adbd//&lxc-waydroid,
  53   signal (receive),
  54
  55 }
  56