blob: 486d096ab464a4fb56d6f99f9891cb627a75404a [file] [log] [blame]
Nick Kralevichf3ef1272012-03-14 15:22:54 -07001# Copyright (C) 2012 The Android Open Source Project
2#
3# IMPORTANT: Do not create world writable files or directories.
4# This is a common source of Android security bugs.
5#
6
Ying Wang5748ee92013-07-23 18:03:37 -07007import /init.environ.rc
Mike Lockwood4f5d5172012-04-04 11:26:59 -07008import /init.usb.rc
Mike Lockwood35ea5e42012-08-28 10:25:13 -07009import /init.${ro.hardware}.rc
Yueyao Zhuf7c34ad2017-05-18 12:46:34 -070010import /vendor/etc/init/hw/init.${ro.hardware}.rc
Badhri Jagan Sridharane1801862015-08-28 19:32:45 -070011import /init.usb.configfs.rc
Narayan Kamath4456a552014-03-31 11:08:02 +010012import /init.${ro.zygote}.rc
Dima Zavin7634bf82011-12-16 14:23:22 -080013
Colin Crossf83d0b92010-04-21 12:04:20 -070014on early-init
Dima Zavin4a253902011-11-04 12:45:52 -070015 # Set init and its forked children's oom_adj.
Todd Poynor46765502013-09-16 19:32:03 -070016 write /proc/1/oom_score_adj -1000
Dima Zavin4a253902011-11-04 12:45:52 -070017
Nick Kralevichd28a5352015-10-09 17:09:10 -070018 # Disable sysrq from keyboard
19 write /proc/sys/kernel/sysrq 0
20
Stephen Smalleydeb41e52013-10-01 09:21:47 -040021 # Set the security context of /adb_keys if present.
22 restorecon /adb_keys
23
Alex Deymobb968fb2016-02-29 17:23:36 -080024 # Set the security context of /postinstall if present.
25 restorecon /postinstall
26
Robert Beneac6385692017-05-31 16:07:53 -070027 # Mount cgroup mount point for cpu accounting
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -080028 mount cgroup none /acct nodev noexec nosuid cpuacct
Luis Hector Chavez0451fd62018-07-30 13:06:46 -070029 chmod 0555 /acct
Robert Beneac6385692017-05-31 16:07:53 -070030 mkdir /acct/uid
31
32 # root memory control cgroup, used by lmkd
33 mkdir /dev/memcg 0700 root system
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -080034 mount cgroup none /dev/memcg nodev noexec nosuid memory
Mark Salyzyn64d97d82018-04-09 09:50:32 -070035 # memory.pressure_level used by lmkd
36 chown root system /dev/memcg/memory.pressure_level
37 chmod 0040 /dev/memcg/memory.pressure_level
Robert Beneac6385692017-05-31 16:07:53 -070038 # app mem cgroups, used by activity manager, lmkd and zygote
39 mkdir /dev/memcg/apps/ 0755 system system
Robert Benea3280e482017-06-27 23:09:03 -070040 # cgroup for system_server and surfaceflinger
41 mkdir /dev/memcg/system 0550 system system
Robert Beneac6385692017-05-31 16:07:53 -070042
Colin Crossf83d0b92010-04-21 12:04:20 -070043 start ueventd
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080044
45on init
Riley Andrews6dfdc7c2014-06-18 20:35:40 -070046 sysclktz 0
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080047
Nick Kralevich27cb4102016-01-22 18:02:29 -080048 # Mix device-specific information into the entropy pool
49 copy /proc/cmdline /dev/urandom
50 copy /default.prop /dev/urandom
51
Elliott Hughesff1ef9f2017-12-06 08:59:02 -080052 symlink /system/bin /bin
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080053 symlink /system/etc /etc
Elliott Hughesff1ef9f2017-12-06 08:59:02 -080054
55 # Backward compatibility.
Brian Swetlandbb6f68c2009-09-18 15:31:23 -070056 symlink /sys/kernel/debug /d
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080057
Elliott Hughes3a5d71a2015-02-13 16:47:02 -080058 # Link /vendor to /system/vendor for devices without a vendor partition.
Daniel Rosenbergf67d6bd2014-06-26 14:55:04 -070059 symlink /system/vendor /vendor
60
Todd Kjosba8a4752015-10-26 16:22:11 -070061 # Create energy-aware scheduler tuning nodes
Todd Kjos11cde562016-02-23 09:00:36 -080062 mkdir /dev/stune
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -080063 mount cgroup none /dev/stune nodev noexec nosuid schedtune
Todd Kjos11cde562016-02-23 09:00:36 -080064 mkdir /dev/stune/foreground
Tim Murray5dcff8f2016-07-11 13:57:31 -070065 mkdir /dev/stune/background
Tim Murray955694b2016-07-11 11:40:15 -070066 mkdir /dev/stune/top-app
Joel Fernandesf50d1092016-12-19 11:01:55 -080067 mkdir /dev/stune/rt
Todd Kjos11cde562016-02-23 09:00:36 -080068 chown system system /dev/stune
69 chown system system /dev/stune/foreground
Tim Murray5dcff8f2016-07-11 13:57:31 -070070 chown system system /dev/stune/background
Tim Murray955694b2016-07-11 11:40:15 -070071 chown system system /dev/stune/top-app
Joel Fernandesf50d1092016-12-19 11:01:55 -080072 chown system system /dev/stune/rt
Todd Kjos11cde562016-02-23 09:00:36 -080073 chown system system /dev/stune/tasks
74 chown system system /dev/stune/foreground/tasks
Tim Murray5dcff8f2016-07-11 13:57:31 -070075 chown system system /dev/stune/background/tasks
Tim Murray955694b2016-07-11 11:40:15 -070076 chown system system /dev/stune/top-app/tasks
Joel Fernandesf50d1092016-12-19 11:01:55 -080077 chown system system /dev/stune/rt/tasks
Todd Kjos11cde562016-02-23 09:00:36 -080078 chmod 0664 /dev/stune/tasks
79 chmod 0664 /dev/stune/foreground/tasks
Tim Murray5dcff8f2016-07-11 13:57:31 -070080 chmod 0664 /dev/stune/background/tasks
Tim Murray955694b2016-07-11 11:40:15 -070081 chmod 0664 /dev/stune/top-app/tasks
Joel Fernandesf50d1092016-12-19 11:01:55 -080082 chmod 0664 /dev/stune/rt/tasks
Todd Kjosba8a4752015-10-26 16:22:11 -070083
Jeff Sharkeyfc000482015-03-16 10:17:47 -070084 restorecon_recursive /mnt
Jeff Sharkey5dd0f862012-08-17 16:01:16 -070085
Luis Hector Chavez87749452018-02-14 08:35:01 -080086 mount configfs none /config nodev noexec nosuid
Daniel Rosenberg4edec252016-02-18 19:48:31 -080087 chmod 0775 /config/sdcardfs
88 chown system package_info /config/sdcardfs
89
San Mehat6ea3cc62010-02-19 18:25:22 -080090 mkdir /mnt/secure 0700 root root
Jeff Sharkeyfc000482015-03-16 10:17:47 -070091 mkdir /mnt/secure/asec 0700 root root
92 mkdir /mnt/asec 0755 root system
93 mkdir /mnt/obb 0755 root system
94 mkdir /mnt/media_rw 0750 root media_rw
95 mkdir /mnt/user 0755 root root
96 mkdir /mnt/user/0 0755 root root
Jeff Sharkeyae0a5ac2015-04-06 14:08:54 -070097 mkdir /mnt/expand 0771 system system
Daichi Hirono7abc71e2015-12-11 13:29:04 +090098 mkdir /mnt/appfuse 0711 root root
San Mehat6ea3cc62010-02-19 18:25:22 -080099
Jeff Sharkeyf38f29c2015-06-23 14:30:37 -0700100 # Storage views to support runtime permissions
Jeff Sharkeyb9f438f2015-08-06 11:39:44 -0700101 mkdir /mnt/runtime 0700 root root
102 mkdir /mnt/runtime/default 0755 root root
103 mkdir /mnt/runtime/default/self 0755 root root
104 mkdir /mnt/runtime/read 0755 root root
105 mkdir /mnt/runtime/read/self 0755 root root
106 mkdir /mnt/runtime/write 0755 root root
107 mkdir /mnt/runtime/write/self 0755 root root
San Mehat6ea3cc62010-02-19 18:25:22 -0800108
Jeff Sharkeyfc000482015-03-16 10:17:47 -0700109 # Symlink to keep legacy apps working in multi-user world
Jeff Sharkeyfc000482015-03-16 10:17:47 -0700110 symlink /storage/self/primary /sdcard
Nick Kralevichd2f0a2c2016-04-12 20:36:01 -0700111 symlink /storage/self/primary /mnt/sdcard
Jeff Sharkeyb9f438f2015-08-06 11:39:44 -0700112 symlink /mnt/user/0/primary /mnt/runtime/default/self/primary
Kenny Rootc7858a32010-07-15 12:14:44 -0700113
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800114 write /proc/sys/kernel/panic_on_oops 1
115 write /proc/sys/kernel/hung_task_timeout_secs 0
116 write /proc/cpu/alignment 4
Riley Andrewse850f572015-07-20 16:01:48 -0700117
118 # scheduler tunables
119 # Disable auto-scaling of scheduler tunables with hotplug. The tunables
120 # will vary across devices in unpredictable ways if allowed to scale with
121 # cpu cores.
122 write /proc/sys/kernel/sched_tunable_scaling 0
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800123 write /proc/sys/kernel/sched_latency_ns 10000000
124 write /proc/sys/kernel/sched_wakeup_granularity_ns 2000000
San Mehat7baff712009-09-16 13:32:23 -0700125 write /proc/sys/kernel/sched_child_runs_first 0
Riley Andrewse850f572015-07-20 16:01:48 -0700126
Nick Kralevichd707fb32011-10-06 11:47:11 -0700127 write /proc/sys/kernel/randomize_va_space 2
Nick Kralevich27cca212011-12-05 14:48:08 -0800128 write /proc/sys/vm/mmap_min_addr 32768
Nick Kralevichbe341cc2013-02-21 18:36:43 -0800129 write /proc/sys/net/ipv4/ping_group_range "0 2147483647"
Mark Salyzyn39944c82015-09-08 11:24:07 -0700130 write /proc/sys/net/unix/max_dgram_qlen 600
Glenn Kastenb91bd9f2012-04-19 16:18:37 -0700131 write /proc/sys/kernel/sched_rt_runtime_us 950000
132 write /proc/sys/kernel/sched_rt_period_us 1000000
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800133
Sandeep Patil5fee4962016-12-07 10:55:45 -0800134 # Assign reasonable ceiling values for socket rcv/snd buffers.
135 # These should almost always be overridden by the target per the
136 # the corresponding technology maximums.
137 write /proc/sys/net/core/rmem_max 262144
138 write /proc/sys/net/core/wmem_max 262144
139
Sreeram Ramachandranfd949222014-04-09 17:44:56 -0700140 # reflect fwmark from incoming packets onto generated replies
141 write /proc/sys/net/ipv4/fwmark_reflect 1
142 write /proc/sys/net/ipv6/fwmark_reflect 1
143
144 # set fwmark on accepted sockets
145 write /proc/sys/net/ipv4/tcp_fwmark_accept 1
146
Greg Hackmannf3fd1222014-12-03 09:57:00 -0800147 # disable icmp redirects
148 write /proc/sys/net/ipv4/conf/all/accept_redirects 0
149 write /proc/sys/net/ipv6/conf/all/accept_redirects 0
150
Nick Kralevich15ffc532017-08-25 12:55:52 -0700151 # /proc/net/fib_trie leaks interface IP addresses
152 chmod 0400 /proc/net/fib_trie
153
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700154 # Create cgroup mount points for process groups
San Mehat529520e2009-10-06 11:22:55 -0700155 mkdir /dev/cpuctl
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -0800156 mount cgroup none /dev/cpuctl nodev noexec nosuid cpu
San Mehat92175e02010-01-17 12:21:42 -0800157 chown system system /dev/cpuctl
San Mehat529520e2009-10-06 11:22:55 -0700158 chown system system /dev/cpuctl/tasks
Riley Andrews522d72b2014-10-03 17:02:53 -0700159 chmod 0666 /dev/cpuctl/tasks
Glenn Kastenb91bd9f2012-04-19 16:18:37 -0700160 write /dev/cpuctl/cpu.rt_period_us 1000000
Tim Murray3a29e342016-06-17 14:02:16 -0700161 write /dev/cpuctl/cpu.rt_runtime_us 950000
San Mehat529520e2009-10-06 11:22:55 -0700162
Tim Murrayb769c8d2015-06-08 14:56:29 -0700163 # sets up initial cpusets for ActivityManager
164 mkdir /dev/cpuset
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -0800165 mount cpuset none /dev/cpuset nodev noexec nosuid
Tim Murrayf429d372015-10-15 12:38:15 -0700166
Tim Murrayb769c8d2015-06-08 14:56:29 -0700167 # this ensures that the cpusets are present and usable, but the device's
168 # init.rc must actually set the correct cpus
Tim Murrayf429d372015-10-15 12:38:15 -0700169 mkdir /dev/cpuset/foreground
Wei Wang8dbd12b2017-04-13 18:27:35 -0700170 copy /dev/cpuset/cpus /dev/cpuset/foreground/cpus
171 copy /dev/cpuset/mems /dev/cpuset/foreground/mems
Tim Murrayf429d372015-10-15 12:38:15 -0700172 mkdir /dev/cpuset/background
Wei Wang8dbd12b2017-04-13 18:27:35 -0700173 copy /dev/cpuset/cpus /dev/cpuset/background/cpus
174 copy /dev/cpuset/mems /dev/cpuset/background/mems
Tim Murrayf429d372015-10-15 12:38:15 -0700175
176 # system-background is for system tasks that should only run on
177 # little cores, not on bigs
178 # to be used only by init, so don't change system-bg permissions
179 mkdir /dev/cpuset/system-background
Wei Wang8dbd12b2017-04-13 18:27:35 -0700180 copy /dev/cpuset/cpus /dev/cpuset/system-background/cpus
181 copy /dev/cpuset/mems /dev/cpuset/system-background/mems
Tim Murrayf429d372015-10-15 12:38:15 -0700182
Tim Murray6647bb52016-01-11 16:16:35 -0800183 mkdir /dev/cpuset/top-app
Wei Wang8dbd12b2017-04-13 18:27:35 -0700184 copy /dev/cpuset/cpus /dev/cpuset/top-app/cpus
185 copy /dev/cpuset/mems /dev/cpuset/top-app/mems
Tim Murray6647bb52016-01-11 16:16:35 -0800186
Tim Murrayf429d372015-10-15 12:38:15 -0700187 # change permissions for all cpusets we'll touch at runtime
Tim Murrayb769c8d2015-06-08 14:56:29 -0700188 chown system system /dev/cpuset
189 chown system system /dev/cpuset/foreground
190 chown system system /dev/cpuset/background
Todd Kjosba8a4752015-10-26 16:22:11 -0700191 chown system system /dev/cpuset/system-background
Tim Murray6647bb52016-01-11 16:16:35 -0800192 chown system system /dev/cpuset/top-app
Tim Murrayb769c8d2015-06-08 14:56:29 -0700193 chown system system /dev/cpuset/tasks
194 chown system system /dev/cpuset/foreground/tasks
195 chown system system /dev/cpuset/background/tasks
Todd Kjosba8a4752015-10-26 16:22:11 -0700196 chown system system /dev/cpuset/system-background/tasks
Tim Murray6647bb52016-01-11 16:16:35 -0800197 chown system system /dev/cpuset/top-app/tasks
Tim Murray4284f9f2015-11-10 14:31:09 -0800198
199 # set system-background to 0775 so SurfaceFlinger can touch it
200 chmod 0775 /dev/cpuset/system-background
201
Jeff Vander Stoep3f62a022015-07-23 15:18:36 -0700202 chmod 0664 /dev/cpuset/foreground/tasks
203 chmod 0664 /dev/cpuset/background/tasks
Todd Kjosba8a4752015-10-26 16:22:11 -0700204 chmod 0664 /dev/cpuset/system-background/tasks
Tim Murray6647bb52016-01-11 16:16:35 -0800205 chmod 0664 /dev/cpuset/top-app/tasks
Jeff Vander Stoep3f62a022015-07-23 15:18:36 -0700206 chmod 0664 /dev/cpuset/tasks
Tim Murrayb769c8d2015-06-08 14:56:29 -0700207
208
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700209 # qtaguid will limit access to specific data based on group memberships.
210 # net_bw_acct grants impersonation of socket owners.
211 # net_bw_stats grants access to other apps' detailed tagged-socket stats.
JP Abgrall3e54aab2013-01-04 14:34:58 -0800212 chown root net_bw_acct /proc/net/xt_qtaguid/ctrl
213 chown root net_bw_stats /proc/net/xt_qtaguid/stats
214
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700215 # Allow everybody to read the xt_qtaguid resource tracking misc dev.
216 # This is needed by any process that uses socket tagging.
JP Abgrall8e3ff702011-09-11 16:12:27 -0700217 chmod 0644 /dev/xt_qtaguid
218
Chenbo Feng2cba6f22017-10-23 11:57:59 -0700219 mkdir /dev/cg2_bpf
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -0800220 mount cgroup2 cg2_bpf /dev/cg2_bpf nodev noexec nosuid
Chenbo Feng2cba6f22017-10-23 11:57:59 -0700221 chown root root /dev/cg2_bpf
222 chmod 0600 /dev/cg2_bpf
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -0800223 mount bpf bpf /sys/fs/bpf nodev noexec nosuid
Chenbo Feng2cba6f22017-10-23 11:57:59 -0700224
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700225 # Create location for fs_mgr to store abbreviated output from filesystem
226 # checker programs.
Ken Sumrall4eaf9052013-09-18 17:49:21 -0700227 mkdir /dev/fscklogs 0770 root system
228
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700229 # pstore/ramoops previous console log
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -0800230 mount pstore pstore /sys/fs/pstore nodev noexec nosuid
Mark Salyzyn7ab805e2018-06-29 10:32:11 -0700231 chown system log /sys/fs/pstore
232 chmod 0550 /sys/fs/pstore
Todd Poynor479efb52013-11-21 20:23:54 -0800233 chown system log /sys/fs/pstore/console-ramoops
234 chmod 0440 /sys/fs/pstore/console-ramoops
Mark Salyzyn4eb0ba02017-06-27 09:32:32 -0700235 chown system log /sys/fs/pstore/console-ramoops-0
236 chmod 0440 /sys/fs/pstore/console-ramoops-0
Mark Salyzyn4b0313e2014-12-15 07:52:19 -0800237 chown system log /sys/fs/pstore/pmsg-ramoops-0
238 chmod 0440 /sys/fs/pstore/pmsg-ramoops-0
Todd Poynor479efb52013-11-21 20:23:54 -0800239
Greg Hackmanncee87572015-01-26 10:40:29 -0800240 # enable armv8_deprecated instruction hooks
241 write /proc/sys/abi/swp 1
242
Greg Hackmann40a96e42016-02-01 09:59:44 -0800243 # Linux's execveat() syscall may construct paths containing /dev/fd
244 # expecting it to point to /proc/self/fd
245 symlink /proc/self/fd /dev/fd
246
Yueyao (Nathan) Zhu60c6dac2016-06-21 12:04:54 -0700247 export DOWNLOAD_CACHE /data/cache
248
Wei Wangabfbec32016-08-23 11:58:09 -0700249 # set RLIMIT_NICE to allow priorities from 19 to -20
Tom Cherrycb5fccc2017-08-28 12:53:56 -0700250 setrlimit nice 40 40
251
252 # Allow up to 32K FDs per process
253 setrlimit nofile 32768 32768
Wei Wangabfbec32016-08-23 11:58:09 -0700254
David Lin27b2c1e2017-03-08 17:36:18 -0800255 # This allows the ledtrig-transient properties to be created here so
256 # that they can be chown'd to system:system later on boot
257 write /sys/class/leds/vibrator/trigger "transient"
258
Riley Andrewse4b7b292014-06-16 15:06:21 -0700259# Healthd can trigger a full boot from charger mode by signaling this
260# property when the power button is held.
261on property:sys.boot_from_charger_mode=1
262 class_stop charger
263 trigger late-init
264
Paul Lawrence948410a2015-07-01 14:40:56 -0700265on load_persist_props_action
266 load_persist_props
Mark Salyzyn5c39e0a2015-04-20 08:55:02 -0700267 start logd
Mark Salyzyn48d06062015-03-11 14:45:05 -0700268 start logd-reinit
Riley Andrewse4b7b292014-06-16 15:06:21 -0700269
Riley Andrews80c7a5e2014-07-11 15:05:23 -0700270# Indicate to fw loaders that the relevant mounts are up.
271on firmware_mounts_complete
272 rm /dev/.booting
273
Riley Andrewse4b7b292014-06-16 15:06:21 -0700274# Mount filesystems and start core system services.
275on late-init
276 trigger early-fs
Wei Wangabfbec32016-08-23 11:58:09 -0700277
278 # Mount fstab in init.{$device}.rc by mount_all command. Optional parameter
279 # '--early' can be specified to skip entries with 'latemount'.
280 # /system and /vendor must be mounted by the end of the fs stage,
281 # while /data is optional.
Riley Andrewse4b7b292014-06-16 15:06:21 -0700282 trigger fs
283 trigger post-fs
Riley Andrewse4b7b292014-06-16 15:06:21 -0700284
Wei Wangabfbec32016-08-23 11:58:09 -0700285 # Mount fstab in init.{$device}.rc by mount_all with '--late' parameter
286 # to only mount entries with 'latemount'. This is needed if '--early' is
287 # specified in the previous mount_all command on the fs stage.
288 # With /system mounted and properties form /system + /factory available,
289 # some services can be started.
290 trigger late-fs
291
Paul Lawrence948410a2015-07-01 14:40:56 -0700292 # Now we can mount /data. File encryption requires keymaster to decrypt
Wei Wangabfbec32016-08-23 11:58:09 -0700293 # /data, which in turn can only be loaded when system properties are present.
Paul Lawrence948410a2015-07-01 14:40:56 -0700294 trigger post-fs-data
Wei Wangabfbec32016-08-23 11:58:09 -0700295
Wei Wang7f32aa42017-03-08 14:46:50 -0800296 # Now we can start zygote for devices with file based encryption
Wei Wanga2058032017-03-08 12:36:54 -0800297 trigger zygote-start
298
Wei Wangabfbec32016-08-23 11:58:09 -0700299 # Load persist properties and override properties (if enabled) from /data.
Paul Lawrence948410a2015-07-01 14:40:56 -0700300 trigger load_persist_props_action
Riley Andrewse4b7b292014-06-16 15:06:21 -0700301
Riley Andrews67cb1ae2014-07-15 20:39:41 -0700302 # Remove a file to wake up anything waiting for firmware.
303 trigger firmware_mounts_complete
304
Riley Andrewse4b7b292014-06-16 15:06:21 -0700305 trigger early-boot
306 trigger boot
307
Colin Cross31712be2010-04-09 12:26:06 -0700308on post-fs
Mark Salyzyn82a395d2017-04-18 08:13:06 -0700309 # Load properties from
310 # /system/build.prop,
311 # /odm/build.prop,
312 # /vendor/build.prop and
313 # /factory/factory.prop
314 load_system_props
315 # start essential services
Mark Salyzyn124ff152015-04-07 15:32:12 -0700316 start logd
Wei Wang00cdc102017-04-13 13:50:09 -0700317 start servicemanager
Steven Morelandd6275022017-03-24 16:23:07 +0000318 start hwservicemanager
Wei Wang00cdc102017-04-13 13:50:09 -0700319 start vndservicemanager
Steven Morelandd6275022017-03-24 16:23:07 +0000320
Luis Hector Chavez30780a72018-02-14 08:36:16 -0800321 # Once everything is setup, no need to modify /.
Luis Hector Chavezd07d0942018-07-11 08:13:34 -0700322 # The bind+remount combination allows this to work in containers.
323 mount rootfs rootfs / remount bind ro nodev
Jeff Sharkeyf38f29c2015-06-23 14:30:37 -0700324 # Mount shared so changes propagate into child namespaces
Jeff Sharkey885342a2012-08-14 21:00:22 -0700325 mount rootfs rootfs / shared rec
Jeff Sharkeyf38f29c2015-06-23 14:30:37 -0700326 # Mount default storage into root namespace
Hidehiko Abeec8637e2016-03-09 16:41:50 +0900327 mount none /mnt/runtime/default /storage bind rec
328 mount none none /storage slave rec
Brian Swetland56de7a12010-09-08 15:06:45 -0700329
Nick Kralevich715c4dc2015-12-07 16:57:08 -0800330 # Make sure /sys/kernel/debug (if present) is labeled properly
Paul Lawrencea8d84342016-11-14 15:40:18 -0800331 # Note that tracefs may be mounted under debug, so we need to cross filesystems
332 restorecon --recursive --cross-filesystems /sys/kernel/debug
Paul Lawrenced2abcbd2016-11-02 14:23:31 -0700333
Ken Sumrall752923c2010-12-03 16:33:31 -0800334 # We chown/chmod /cache again so because mount is run as root + defaults
335 chown system cache /cache
336 chmod 0770 /cache
Stephen Smalley1eee4192012-01-13 08:54:34 -0500337 # We restorecon /cache in case the cache partition has been reset.
Nick Kraleviche1695912014-07-09 12:39:21 -0700338 restorecon_recursive /cache
Ken Sumrall752923c2010-12-03 16:33:31 -0800339
Tao Baoe48aed02015-05-11 14:08:18 -0700340 # Create /cache/recovery in case it's not there. It'll also fix the odd
341 # permissions if created by the recovery system.
342 mkdir /cache/recovery 0770 system cache
Ken Sumrall752923c2010-12-03 16:33:31 -0800343
Christopher Tate63c463f2016-01-28 17:09:42 -0800344 # Backup/restore mechanism uses the cache partition
345 mkdir /cache/backup_stage 0700 system system
346 mkdir /cache/backup 0700 system system
347
Ken Sumrall752923c2010-12-03 16:33:31 -0800348 #change permissions on vmallocinfo so we can grab it from bugreports
349 chown root log /proc/vmallocinfo
350 chmod 0440 /proc/vmallocinfo
351
Dima Zavin94812662012-09-25 14:22:02 -0700352 chown root log /proc/slabinfo
353 chmod 0440 /proc/slabinfo
354
Ken Sumrall752923c2010-12-03 16:33:31 -0800355 #change permissions on kmsg & sysrq-trigger so bugreports can grab kthread stacks
356 chown root system /proc/kmsg
357 chmod 0440 /proc/kmsg
358 chown root system /proc/sysrq-trigger
359 chmod 0220 /proc/sysrq-trigger
Colin Crossb35e36e2012-08-02 18:14:33 -0700360 chown system log /proc/last_kmsg
361 chmod 0440 /proc/last_kmsg
Ken Sumrall752923c2010-12-03 16:33:31 -0800362
dcashman5822a4a2014-03-25 16:31:07 -0700363 # make the selinux kernel policy world-readable
364 chmod 0444 /sys/fs/selinux/policy
365
Ken Sumrall752923c2010-12-03 16:33:31 -0800366 # create the lost+found directories, so as to enforce our permissions
Chia-chi Yehea744142011-07-08 16:52:18 -0700367 mkdir /cache/lost+found 0770 root root
Ken Sumrall752923c2010-12-03 16:33:31 -0800368
Janis Danisevskis1ad8d212017-04-06 12:44:59 -0700369on late-fs
Joel Galensond48c4cf2017-06-13 10:15:05 -0700370 # Ensure that tracefs has the correct permissions.
371 # This does not work correctly if it is called in post-fs.
372 chmod 0755 /sys/kernel/debug/tracing
373
Janis Danisevskis1ad8d212017-04-06 12:44:59 -0700374 # HALs required before storage encryption can get unlocked (FBE/FDE)
375 class_start early_hal
376
Ken Sumrall752923c2010-12-03 16:33:31 -0800377on post-fs-data
Colin Cross31712be2010-04-09 12:26:06 -0700378 # We chown/chmod /data again so because mount is run as root + defaults
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800379 chown system system /data
380 chmod 0771 /data
Stephen Smalley1eee4192012-01-13 08:54:34 -0500381 # We restorecon /data in case the userdata partition has been reset.
382 restorecon /data
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800383
Elliott Hughes2f74a5d2016-02-02 09:15:59 -0800384 # Make sure we have the device encryption key.
Paul Lawrence806d10b2015-04-28 22:07:10 +0000385 start vold
386 installkey /data
387
Yongqin Liua197ff12014-12-05 13:45:02 +0800388 # Start bootcharting as soon as possible after the data partition is
389 # mounted to collect more data.
390 mkdir /data/bootchart 0755 shell shell
Elliott Hughesa3641af2016-11-10 17:43:47 -0800391 bootchart start
Yongqin Liua197ff12014-12-05 13:45:02 +0800392
Nick Kralevichb410eb12013-09-17 16:18:23 -0700393 # Avoid predictable entropy pool. Carry over entropy from previous boot.
394 copy /data/system/entropy.dat /dev/urandom
395
Ken Sumrall752923c2010-12-03 16:33:31 -0800396 # create basic filesystem structure
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800397 mkdir /data/misc 01771 system misc
Mark Salyzyn93394032017-07-14 10:37:57 -0700398 mkdir /data/misc/recovery 0770 system log
Siqi Linb9b76de2017-07-26 13:18:15 -0700399 copy /data/misc/recovery/ro.build.fingerprint /data/misc/recovery/ro.build.fingerprint.1
400 chmod 0440 /data/misc/recovery/ro.build.fingerprint.1
401 chown system log /data/misc/recovery/ro.build.fingerprint.1
402 write /data/misc/recovery/ro.build.fingerprint ${ro.build.fingerprint}
403 chmod 0440 /data/misc/recovery/ro.build.fingerprint
404 chown system log /data/misc/recovery/ro.build.fingerprint
Mark Salyzyn93394032017-07-14 10:37:57 -0700405 mkdir /data/misc/recovery/proc 0770 system log
406 copy /data/misc/recovery/proc/version /data/misc/recovery/proc/version.1
407 chmod 0440 /data/misc/recovery/proc/version.1
408 chown system log /data/misc/recovery/proc/version.1
409 copy /proc/version /data/misc/recovery/proc/version
410 chmod 0440 /data/misc/recovery/proc/version
411 chown system log /data/misc/recovery/proc/version
Ajay Panicker604208e2016-09-20 11:52:14 -0700412 mkdir /data/misc/bluedroid 02770 bluetooth bluetooth
Pavlin Radoslavov8175bb22015-06-19 19:12:46 -0700413 # Fix the access permissions and group ownership for 'bt_config.conf'
414 chmod 0660 /data/misc/bluedroid/bt_config.conf
Ajay Panicker604208e2016-09-20 11:52:14 -0700415 chown bluetooth bluetooth /data/misc/bluedroid/bt_config.conf
416 mkdir /data/misc/bluetooth 0770 bluetooth bluetooth
417 mkdir /data/misc/bluetooth/logs 0770 bluetooth bluetooth
Chia-chi Yeh9b4f1ff2009-09-18 10:35:26 +0800418 mkdir /data/misc/keystore 0700 keystore keystore
Andres Morales6a49c2f2015-04-16 13:16:24 -0700419 mkdir /data/misc/gatekeeper 0700 system system
Brian Carlstrom04918932011-06-30 22:50:29 -0700420 mkdir /data/misc/keychain 0771 system system
Sreeram Ramachandranb46efdb2014-07-07 22:09:54 -0700421 mkdir /data/misc/net 0750 root shell
Robert Greenwalt2aa33a32013-07-16 09:46:17 -0700422 mkdir /data/misc/radio 0770 system radio
Robert Greenwaltd6d47802012-09-26 16:04:27 -0700423 mkdir /data/misc/sms 0770 system radio
fionaxu06b8e2e2017-11-21 12:31:57 -0800424 mkdir /data/misc/carrierid 0770 system radio
Niklas Lindgrenfd665382018-05-21 16:53:00 +0200425 mkdir /data/misc/apns 0770 system radio
Elliott Hughesf820e852012-10-19 18:10:05 -0700426 mkdir /data/misc/zoneinfo 0775 system system
Abodunrinwa Tokid6ab6452017-04-27 18:46:59 +0100427 mkdir /data/misc/textclassifier 0771 system system
Chia-chi Yeh9bb4d412011-07-08 20:03:03 -0700428 mkdir /data/misc/vpn 0770 system vpn
Torne (Richard Coles)234f6962014-05-22 18:40:21 +0100429 mkdir /data/misc/shared_relro 0771 shared_relro shared_relro
Oscar Montemayord0aa32c2010-01-06 13:18:12 -0800430 mkdir /data/misc/systemkeys 0700 system system
Mike Lockwood48d116e2009-07-08 18:42:08 -0400431 mkdir /data/misc/wifi 0770 wifi wifi
Stephen Smalley82e87ed2014-01-29 13:53:03 -0500432 mkdir /data/misc/wifi/sockets 0770 wifi wifi
Stephen Smalley82e87ed2014-01-29 13:53:03 -0500433 mkdir /data/misc/wifi/wpa_supplicant 0770 wifi wifi
Jaewan Kim373d9fa2014-03-10 17:13:07 +0900434 mkdir /data/misc/ethernet 0770 system system
Stephen Smalley82e87ed2014-01-29 13:53:03 -0500435 mkdir /data/misc/dhcp 0770 dhcp dhcp
Robin Lee3094f822014-04-25 15:21:35 +0100436 mkdir /data/misc/user 0771 root root
Dehao Chenac725c12015-05-05 15:05:39 -0700437 mkdir /data/misc/perfprofd 0775 root root
Stephen Smalley82e87ed2014-01-29 13:53:03 -0500438 # give system access to wpa_supplicant.conf for backup and restore
Amith Yamasanieefef322009-07-02 12:08:13 -0700439 chmod 0660 /data/misc/wifi/wpa_supplicant.conf
Chia-chi Yeh5ebced32012-03-07 14:52:10 -0800440 mkdir /data/local 0751 root root
Glenn Kastenb0f908a2013-02-22 14:54:45 -0800441 mkdir /data/misc/media 0700 media media
Glenn Kasten845a4ff2016-02-23 15:23:46 -0800442 mkdir /data/misc/audioserver 0700 audioserver audioserver
Keun Soo Yimbe54c542016-03-01 12:45:27 -0800443 mkdir /data/misc/cameraserver 0700 cameraserver cameraserver
Paul Crowleyf8a6fa52015-06-03 13:33:43 +0100444 mkdir /data/misc/vold 0700 root root
Yasuhiro Matsudaf93db4b2015-06-15 18:49:35 +0900445 mkdir /data/misc/boottrace 0771 system shell
David Zeuthen15914782015-10-07 14:00:55 -0400446 mkdir /data/misc/update_engine 0700 root root
Tianjie Xu74fa3ca2017-11-03 10:59:36 -0700447 mkdir /data/misc/update_engine_log 02750 root log
Calin Juravle9b3e5d52015-11-10 19:16:43 +0000448 mkdir /data/misc/trace 0700 root root
Vishnu Naird09ab7a2017-11-27 09:54:31 -0800449 # create location to store surface and window trace files
450 mkdir /data/misc/wmtrace 0700 system system
Calin Juravle807f23a2016-02-01 19:27:01 +0000451 # profile file layout
452 mkdir /data/misc/profiles 0771 system system
453 mkdir /data/misc/profiles/cur 0771 system system
454 mkdir /data/misc/profiles/ref 0771 system system
David Sehr0eb24e12016-05-28 14:10:38 -0700455 mkdir /data/misc/profman 0770 system shell
Ryan Campbell0b364732017-02-21 17:27:02 -0800456 mkdir /data/misc/gcov 0770 root root
Stephen Smalleydeb41e52013-10-01 09:21:47 -0400457
Jeff Vander Stoep61efb0d2017-03-23 09:23:50 -0700458 mkdir /data/vendor 0771 root root
459 mkdir /data/vendor/hardware 0771 root root
460
Nick Kralevichf3ef1272012-03-14 15:22:54 -0700461 # For security reasons, /data/local/tmp should always be empty.
462 # Do not place files or directories in /data/local/tmp
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800463 mkdir /data/local/tmp 0771 shell shell
Max Bires181d11c2018-01-18 14:23:51 -0800464 mkdir /data/local/traces 0777 shell shell
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800465 mkdir /data/data 0771 system system
466 mkdir /data/app-private 0771 system system
Todd Kennedy0a273352015-11-23 15:24:13 -0800467 mkdir /data/app-ephemeral 0771 system system
Kenny Rootf8bbaba2012-04-12 15:01:52 -0700468 mkdir /data/app-asec 0700 root root
Kenny Root50544172012-09-08 22:39:25 -0700469 mkdir /data/app-lib 0771 system system
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800470 mkdir /data/app 0771 system system
471 mkdir /data/property 0700 root root
Nick Kralevich0359d772015-01-30 17:38:06 -0800472 mkdir /data/tombstones 0771 system system
xshu9a7a5b62017-12-18 11:26:06 -0800473 mkdir /data/vendor/tombstones 0771 root root
474 mkdir /data/vendor/tombstones/wifi 0771 wifi wifi
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800475
Chia-chi Yehea744142011-07-08 16:52:18 -0700476 # create dalvik-cache, so as to enforce our permissions
Alex Light3878ebd2014-08-27 15:40:05 -0700477 mkdir /data/dalvik-cache 0771 root root
Andreas Gampe7dfcc922015-12-08 09:33:07 -0800478 # create the A/B OTA directory, so as to enforce our permissions
479 mkdir /data/ota 0771 root root
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800480
Tao Bao380d6b12016-05-25 16:41:08 -0700481 # create the OTA package directory. It will be accessed by GmsCore (cache
482 # group), update_engine and update_verifier.
483 mkdir /data/ota_package 0770 system cache
484
MÃ¥rten Kongstadb45280d2011-05-30 10:24:54 +0200485 # create resource-cache and double-check the perms
486 mkdir /data/resource-cache 0771 system system
487 chown system system /data/resource-cache
488 chmod 0771 /data/resource-cache
489
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800490 # create the lost+found directories, so as to enforce our permissions
Chia-chi Yehea744142011-07-08 16:52:18 -0700491 mkdir /data/lost+found 0770 root root
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800492
James Dong09cdc0e2012-01-06 15:19:26 -0800493 # create directory for DRM plug-ins - give drm the read/write access to
494 # the following directory.
495 mkdir /data/drm 0770 drm drm
aimitakeshie572d592010-07-27 08:38:35 +0900496
Jeff Tinker08d64302013-04-23 19:54:17 -0700497 # create directory for MediaDrm plug-ins - give drm the read/write access to
498 # the following directory.
499 mkdir /data/mediadrm 0770 mediadrm mediadrm
500
Nick Kralevichc2ea70a2015-07-25 21:06:20 -0700501 mkdir /data/anr 0775 system system
Nick Kralevich89252ce2014-10-20 21:53:56 -0700502
Tom Cherryc3193102017-11-21 10:40:25 -0800503 # NFC: create data/nfc for nv storage
504 mkdir /data/nfc 0770 nfc nfc
505 mkdir /data/nfc/param 0770 nfc nfc
506
Paul Lawrencec410b3b2015-03-26 15:49:42 +0000507 # Create all remaining /data root dirs so that they are made through init
508 # and get proper encryption policy installed
509 mkdir /data/backup 0700 system system
Paul Lawrencec410b3b2015-03-26 15:49:42 +0000510 mkdir /data/ss 0700 system system
Jeff Sharkey11705862015-11-09 17:07:35 -0800511
Paul Lawrencec410b3b2015-03-26 15:49:42 +0000512 mkdir /data/system 0775 system system
Jeff Vander Stoep148dea72018-04-16 16:04:38 -0700513 mkdir /data/system/dropbox 0700 system system
Nick Kralevich9c0437f2015-04-07 16:44:08 -0700514 mkdir /data/system/heapdump 0700 system system
Jeff Sharkeyc9b84a32016-04-14 21:09:34 -0600515 mkdir /data/system/users 0775 system system
Jeff Sharkey3b9c83a2016-02-03 14:44:44 -0700516
517 mkdir /data/system_de 0770 system system
Jeff Sharkey11705862015-11-09 17:07:35 -0800518 mkdir /data/system_ce 0770 system system
Jeff Sharkey3b9c83a2016-02-03 14:44:44 -0700519
520 mkdir /data/misc_de 01771 system misc
521 mkdir /data/misc_ce 01771 system misc
Jeff Sharkey11705862015-11-09 17:07:35 -0800522
Paul Lawrencec410b3b2015-03-26 15:49:42 +0000523 mkdir /data/user 0711 system system
Jeff Sharkey11705862015-11-09 17:07:35 -0800524 mkdir /data/user_de 0711 system system
Jeff Sharkey3b9c83a2016-02-03 14:44:44 -0700525 symlink /data/data /data/user/0
Paul Lawrencec410b3b2015-03-26 15:49:42 +0000526
Jeff Sharkeyd78b55f2016-01-13 09:37:08 -0700527 mkdir /data/media 0770 media_rw media_rw
Jeff Sharkeyd78b55f2016-01-13 09:37:08 -0700528 mkdir /data/media/obb 0770 media_rw media_rw
529
Yueyao (Nathan) Zhu60c6dac2016-06-21 12:04:54 -0700530 mkdir /data/cache 0770 system cache
531 mkdir /data/cache/recovery 0770 system cache
532 mkdir /data/cache/backup_stage 0700 system system
533 mkdir /data/cache/backup 0700 system system
534
Paul Crowley59497452016-02-01 16:37:13 +0000535 init_user0
536
Stephen Smalleyf2b7ee72014-02-06 13:52:52 -0500537 # Set SELinux security contexts on upgrade or policy update.
Paul Lawrencea8d84342016-11-14 15:40:18 -0800538 restorecon --recursive --skip-ce /data
Stephen Smalleyf2b7ee72014-02-06 13:52:52 -0500539
Neil Fuller08913222015-03-31 18:24:29 +0100540 # Check any timezone data in /data is newer than the copy in /system, delete if not.
Nick Kralevich221fca72015-06-03 13:05:28 -0700541 exec - system system -- /system/bin/tzdatacheck /system/usr/share/zoneinfo /data/misc/zoneinfo
Neil Fuller08913222015-03-31 18:24:29 +0100542
Steven Morelandf38aab42017-01-25 10:52:15 -0800543 # If there is no post-fs-data action in the init.<device>.rc file, you
Ken Sumrall752923c2010-12-03 16:33:31 -0800544 # must uncomment this line, otherwise encrypted filesystems
545 # won't work.
546 # Set indication (checked by vold) that we have finished this action
547 #setprop vold.post_fs_data_done 1
548
Wei Wang53842e72017-04-20 14:37:55 -0700549# It is recommended to put unnecessary data/ initialization from post-fs-data
550# to start-zygote in device's init.rc to unblock zygote start.
551on zygote-start && property:ro.crypto.state=unencrypted
552 # A/B update verifier that marks a successful boot.
553 exec_start update_verifier_nonencrypted
554 start netd
555 start zygote
556 start zygote_secondary
557
558on zygote-start && property:ro.crypto.state=unsupported
559 # A/B update verifier that marks a successful boot.
560 exec_start update_verifier_nonencrypted
561 start netd
562 start zygote
563 start zygote_secondary
564
Wei Wangbae9ba32017-03-09 12:35:02 -0800565on zygote-start && property:ro.crypto.state=encrypted && property:ro.crypto.type=file
Wei Wang53842e72017-04-20 14:37:55 -0700566 # A/B update verifier that marks a successful boot.
567 exec_start update_verifier_nonencrypted
568 start netd
569 start zygote
570 start zygote_secondary
Wei Wangbae9ba32017-03-09 12:35:02 -0800571
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800572on boot
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700573 # basic network init
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800574 ifup lo
575 hostname localhost
576 domainname localdomain
577
Benedict Wong00308f82018-03-12 19:00:50 -0700578 # IPsec SA default expiration length
579 write /proc/sys/net/core/xfrm_acq_expires 3600
580
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700581 # Memory management. Basic kernel parameters, and allow the high
582 # level system server to be able to adjust the kernel OOM driver
583 # parameters to match how it is managing things.
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800584 write /proc/sys/vm/overcommit_memory 1
The Android Open Source Projecte037fd72009-03-13 13:04:37 -0700585 write /proc/sys/vm/min_free_order_shift 4
Dianne Hackborn06787f42011-08-07 16:30:24 -0700586 chown root system /sys/module/lowmemorykiller/parameters/adj
Daniel Cardenas429e7422015-03-20 00:07:57 +0000587 chmod 0664 /sys/module/lowmemorykiller/parameters/adj
Dianne Hackborn06787f42011-08-07 16:30:24 -0700588 chown root system /sys/module/lowmemorykiller/parameters/minfree
Daniel Cardenas429e7422015-03-20 00:07:57 +0000589 chmod 0664 /sys/module/lowmemorykiller/parameters/minfree
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800590
San Mehat831d8e12009-10-13 12:24:47 -0700591 # Tweak background writeout
592 write /proc/sys/vm/dirty_expire_centisecs 200
593 write /proc/sys/vm/dirty_background_ratio 5
594
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800595 # Permissions for System Server and daemons.
596 chown radio system /sys/android_power/state
597 chown radio system /sys/android_power/request_state
598 chown radio system /sys/android_power/acquire_full_wake_lock
599 chown radio system /sys/android_power/acquire_partial_wake_lock
600 chown radio system /sys/android_power/release_wake_lock
Arve Hjønnevåg70a163f2012-05-02 17:57:50 -0700601 chown system system /sys/power/autosleep
Arve Hjønnevåg1670f832012-03-20 20:33:09 -0700602 chown system system /sys/power/state
603 chown system system /sys/power/wakeup_count
Pavlin Radoslavov0eca1072015-11-23 17:18:31 -0800604 chown radio wakelock /sys/power/wake_lock
605 chown radio wakelock /sys/power/wake_unlock
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800606 chmod 0660 /sys/power/state
607 chmod 0660 /sys/power/wake_lock
608 chmod 0660 /sys/power/wake_unlock
Todd Poynor0653b972012-04-11 14:48:51 -0700609
610 chown system system /sys/devices/system/cpu/cpufreq/interactive/timer_rate
611 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/timer_rate
Todd Poynor2b5b3bb2012-12-20 18:52:03 -0800612 chown system system /sys/devices/system/cpu/cpufreq/interactive/timer_slack
613 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/timer_slack
Todd Poynor0653b972012-04-11 14:48:51 -0700614 chown system system /sys/devices/system/cpu/cpufreq/interactive/min_sample_time
615 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/min_sample_time
616 chown system system /sys/devices/system/cpu/cpufreq/interactive/hispeed_freq
617 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/hispeed_freq
Todd Poynor2b5b3bb2012-12-20 18:52:03 -0800618 chown system system /sys/devices/system/cpu/cpufreq/interactive/target_loads
619 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/target_loads
Todd Poynor0653b972012-04-11 14:48:51 -0700620 chown system system /sys/devices/system/cpu/cpufreq/interactive/go_hispeed_load
621 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/go_hispeed_load
Todd Poynorf35c2032012-04-19 13:17:24 -0700622 chown system system /sys/devices/system/cpu/cpufreq/interactive/above_hispeed_delay
623 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/above_hispeed_delay
Todd Poynor8d3ea1d2012-04-24 15:37:13 -0700624 chown system system /sys/devices/system/cpu/cpufreq/interactive/boost
625 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/boost
Todd Poynor4ff10e62012-05-03 15:20:48 -0700626 chown system system /sys/devices/system/cpu/cpufreq/interactive/boostpulse
Todd Poynor33045a62012-04-27 20:21:18 -0700627 chown system system /sys/devices/system/cpu/cpufreq/interactive/input_boost
628 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/input_boost
Todd Poynor4f247d72012-12-19 17:43:06 -0800629 chown system system /sys/devices/system/cpu/cpufreq/interactive/boostpulse_duration
630 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/boostpulse_duration
Todd Poynor6b5de1c2013-03-25 13:17:13 -0700631 chown system system /sys/devices/system/cpu/cpufreq/interactive/io_is_busy
632 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/io_is_busy
Todd Poynor0653b972012-04-11 14:48:51 -0700633
634 # Assume SMP uses shared cpufreq policy for all CPUs
635 chown system system /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
636 chmod 0660 /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
637
David Lin27b2c1e2017-03-08 17:36:18 -0800638 chown system system /sys/class/leds/vibrator/trigger
639 chown system system /sys/class/leds/vibrator/activate
640 chown system system /sys/class/leds/vibrator/brightness
641 chown system system /sys/class/leds/vibrator/duration
642 chown system system /sys/class/leds/vibrator/state
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800643 chown system system /sys/class/timed_output/vibrator/enable
644 chown system system /sys/class/leds/keyboard-backlight/brightness
645 chown system system /sys/class/leds/lcd-backlight/brightness
646 chown system system /sys/class/leds/button-backlight/brightness
The Android Open Source Projectf614d642009-03-18 17:39:49 -0700647 chown system system /sys/class/leds/jogball-backlight/brightness
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800648 chown system system /sys/class/leds/red/brightness
649 chown system system /sys/class/leds/green/brightness
650 chown system system /sys/class/leds/blue/brightness
651 chown system system /sys/class/leds/red/device/grpfreq
652 chown system system /sys/class/leds/red/device/grppwm
653 chown system system /sys/class/leds/red/device/blink
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800654 chown system system /sys/module/sco/parameters/disable_esco
655 chown system system /sys/kernel/ipv4/tcp_wmem_min
656 chown system system /sys/kernel/ipv4/tcp_wmem_def
657 chown system system /sys/kernel/ipv4/tcp_wmem_max
658 chown system system /sys/kernel/ipv4/tcp_rmem_min
659 chown system system /sys/kernel/ipv4/tcp_rmem_def
660 chown system system /sys/kernel/ipv4/tcp_rmem_max
661 chown root radio /proc/cmdline
662
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700663 # Define default initial receive window size in segments.
JP Abgrall7c862c82014-02-21 12:05:01 -0800664 setprop net.tcp.default_init_rwnd 60
665
Steven Morelandd6275022017-03-24 16:23:07 +0000666 # Start standard binderized HAL daemons
667 class_start hal
668
Ken Sumrall752923c2010-12-03 16:33:31 -0800669 class_start core
Ken Sumrall752923c2010-12-03 16:33:31 -0800670
671on nonencrypted
Paul Lawrence13d5bb42014-01-30 10:43:52 -0800672 class_start main
Ken Sumrall752923c2010-12-03 16:33:31 -0800673 class_start late_start
674
Riley Andrews1bbef882014-06-26 13:55:03 -0700675on property:sys.init_log_level=*
676 loglevel ${sys.init_log_level}
677
Dima Zavinca47cef2011-08-24 15:28:23 -0700678on charger
679 class_start charger
680
Ken Sumrall752923c2010-12-03 16:33:31 -0800681on property:vold.decrypt=trigger_reset_main
682 class_reset main
683
Ken Sumrallc5c51032011-03-08 17:01:29 -0800684on property:vold.decrypt=trigger_load_persist_props
685 load_persist_props
Mark Salyzyn5c39e0a2015-04-20 08:55:02 -0700686 start logd
Mark Salyzyn48d06062015-03-11 14:45:05 -0700687 start logd-reinit
Ken Sumrallc5c51032011-03-08 17:01:29 -0800688
Ken Sumrall752923c2010-12-03 16:33:31 -0800689on property:vold.decrypt=trigger_post_fs_data
690 trigger post-fs-data
691
Ken Sumralle4349152011-01-17 14:26:34 -0800692on property:vold.decrypt=trigger_restart_min_framework
Tao Bao97df3952015-12-04 17:45:43 -0800693 # A/B update verifier that marks a successful boot.
Tom Cherryaaeb7922017-03-28 13:28:38 -0700694 exec_start update_verifier
Ken Sumralle4349152011-01-17 14:26:34 -0800695 class_start main
696
Ken Sumrall752923c2010-12-03 16:33:31 -0800697on property:vold.decrypt=trigger_restart_framework
Tao Bao97df3952015-12-04 17:45:43 -0800698 # A/B update verifier that marks a successful boot.
Tom Cherryaaeb7922017-03-28 13:28:38 -0700699 exec_start update_verifier
Ken Sumrall752923c2010-12-03 16:33:31 -0800700 class_start main
701 class_start late_start
702
703on property:vold.decrypt=trigger_shutdown_framework
704 class_reset late_start
705 class_reset main
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800706
Elliott Hughesa3641af2016-11-10 17:43:47 -0800707on property:sys.boot_completed=1
708 bootchart stop
709
JP Abgrall7c862c82014-02-21 12:05:01 -0800710# system server cannot write to /proc/sys files,
711# and chown/chmod does not work for /proc/sys/ entries.
712# So proxy writes through init.
Colin Cross57fdb5c2013-07-25 10:34:30 -0700713on property:sys.sysctl.extra_free_kbytes=*
714 write /proc/sys/vm/extra_free_kbytes ${sys.sysctl.extra_free_kbytes}
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700715
JP Abgrall7c862c82014-02-21 12:05:01 -0800716# "tcp_default_init_rwnd" Is too long!
717on property:sys.sysctl.tcp_def_init_rwnd=*
718 write /proc/sys/net/ipv4/tcp_default_init_rwnd ${sys.sysctl.tcp_def_init_rwnd}
719
Daniel Micay2b22a662015-09-04 16:23:01 -0400720on property:security.perf_harden=0
721 write /proc/sys/kernel/perf_event_paranoid 1
Yabin Cui4f0da7c2018-06-29 14:52:47 -0700722 write /proc/sys/kernel/perf_event_max_sample_rate ${debug.perf_event_max_sample_rate:-100000}
723 write /proc/sys/kernel/perf_cpu_time_max_percent ${debug.perf_cpu_time_max_percent:-25}
724 write /proc/sys/kernel/perf_event_mlock_kb ${debug.perf_event_mlock_kb:-516}
Daniel Micay2b22a662015-09-04 16:23:01 -0400725
726on property:security.perf_harden=1
727 write /proc/sys/kernel/perf_event_paranoid 3
Colin Cross57fdb5c2013-07-25 10:34:30 -0700728
Wei Wangeeab4912017-06-27 22:08:45 -0700729# on shutdown
730# In device's init.rc, this trigger can be used to do device-specific actions
731# before shutdown. e.g disable watchdog and mask error handling
732
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800733## Daemon processes to be run by init.
734##
Colin Crossf83d0b92010-04-21 12:04:20 -0700735service ueventd /sbin/ueventd
Ken Sumrall752923c2010-12-03 16:33:31 -0800736 class core
Colin Crossf83d0b92010-04-21 12:04:20 -0700737 critical
Stephen Smalley1eee4192012-01-13 08:54:34 -0500738 seclabel u:r:ueventd:s0
Keun-young Parkcccb34f2017-07-05 11:38:44 -0700739 shutdown critical
Colin Crossf83d0b92010-04-21 12:04:20 -0700740
Sandeep Patil6012db52016-11-01 08:45:19 -0700741service healthd /system/bin/healthd
Todd Poynor13f4c9f2013-06-19 15:09:35 -0700742 class core
743 critical
Pavlin Radoslavov0eca1072015-11-23 17:18:31 -0800744 group root system wakelock
Todd Poynor13f4c9f2013-06-19 15:09:35 -0700745
Brian Swetlandb4d65392010-10-27 15:40:23 -0700746service console /system/bin/sh
Ken Sumrall752923c2010-12-03 16:33:31 -0800747 class core
Brian Swetlandb4d65392010-10-27 15:40:23 -0700748 console
749 disabled
750 user shell
Nick Kralevichc39ba5a2015-11-07 16:52:17 -0800751 group shell log readproc
Stephen Smalley610653f2013-12-23 14:11:02 -0500752 seclabel u:r:shell:s0
Dmitry Shmidtd0fb2512017-10-11 11:18:51 -0700753 setenv HOSTNAME console
Brian Swetlandb4d65392010-10-27 15:40:23 -0700754
Mike Lockwoodd49b4ef2010-11-19 09:12:27 -0500755on property:ro.debuggable=1
Calin Juravle9b3e5d52015-11-10 19:16:43 +0000756 # Give writes to anyone for the trace folder on debug builds.
757 # The folder is used to store method traces.
758 chmod 0773 /data/misc/trace
Vishnu Naird09ab7a2017-11-27 09:54:31 -0800759 # Give reads to anyone for the window trace folder on debug builds.
760 chmod 0775 /data/misc/wmtrace
Brian Swetlandb4d65392010-10-27 15:40:23 -0700761 start console
762
Doug Zongker95262022014-02-04 12:15:14 -0800763service flash_recovery /system/bin/install-recovery.sh
Ken Sumrall752923c2010-12-03 16:33:31 -0800764 class main
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800765 oneshot