| Alan Stokes | 3ef78d9 | 2021-09-08 11:51:06 +0100 | [diff] [blame] | 1 | # Copyright (C) 2021 The Android Open Source Project |
| 2 | # |
| 3 | # Licensed under the Apache License, Version 2.0 (the "License"); |
| 4 | # you may not use this file except in compliance with the License. |
| 5 | # You may obtain a copy of the License at |
| 6 | # |
| 7 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 8 | # |
| 9 | # Unless required by applicable law or agreed to in writing, software |
| 10 | # distributed under the License is distributed on an "AS IS" BASIS, |
| 11 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 12 | # See the License for the specific language governing permissions and |
| 13 | # limitations under the License. |
| 14 | |
| 15 | service composd /apex/com.android.compos/bin/composd |
| 16 | class main |
| Alan Stokes | b2cc79e | 2021-09-14 14:08:46 +0100 | [diff] [blame] | 17 | user root |
| Alan Stokes | 3ef78d9 | 2021-09-08 11:51:06 +0100 | [diff] [blame] | 18 | group system |
| 19 | interface aidl android.system.composd |
| Alan Stokes | 3ef78d9 | 2021-09-08 11:51:06 +0100 | [diff] [blame] | 20 | disabled |
| 21 | oneshot |
| Nikita Ioffe | 3253d20 | 2022-12-29 22:54:11 +0000 | [diff] [blame] | 22 | # Explicitly specify empty capabilities, otherwise composd will inherit all |
| 23 | # the capabilities from init. |
| 24 | # Note: whether a process can use capabilities is controlled by SELinux, so |
| 25 | # inheriting all the capabilities from init is not a security issue. |
| 26 | # However, for defense-in-depth and just for the sake of bookkeeping it's |
| 27 | # better to explicitly state that composd doesn't need any capabilities. |
| 28 | capabilities |