blob: 1bb7ac3e13c5f69c84fc82715eba3f7b2e452716 [file] [log] [blame]
Nick Kralevichf3ef1272012-03-14 15:22:54 -07001# Copyright (C) 2012 The Android Open Source Project
2#
3# IMPORTANT: Do not create world writable files or directories.
4# This is a common source of Android security bugs.
5#
6
Ying Wang5748ee92013-07-23 18:03:37 -07007import /init.environ.rc
Tom Cherryc9f53532019-11-04 10:30:36 -08008import /system/etc/init/hw/init.usb.rc
Mike Lockwood35ea5e42012-08-28 10:25:13 -07009import /init.${ro.hardware}.rc
Yueyao Zhuf7c34ad2017-05-18 12:46:34 -070010import /vendor/etc/init/hw/init.${ro.hardware}.rc
Tom Cherryc9f53532019-11-04 10:30:36 -080011import /system/etc/init/hw/init.usb.configfs.rc
12import /system/etc/init/hw/init.${ro.zygote}.rc
Dima Zavin7634bf82011-12-16 14:23:22 -080013
Suren Baghdasaryan192aee72018-12-21 11:41:50 -080014# Cgroups are mounted right before early-init using list from /etc/cgroups.json
Colin Crossf83d0b92010-04-21 12:04:20 -070015on early-init
Nick Kralevichd28a5352015-10-09 17:09:10 -070016 # Disable sysrq from keyboard
17 write /proc/sys/kernel/sysrq 0
18
Eric Biggers843f46e2020-03-11 09:56:15 -070019 # Android doesn't need kernel module autoloading, and it causes SELinux
20 # denials. So disable it by setting modprobe to the empty string. Note: to
21 # explicitly set a sysctl to an empty string, a trailing newline is needed.
22 write /proc/sys/kernel/modprobe \n
23
Stephen Smalleydeb41e52013-10-01 09:21:47 -040024 # Set the security context of /adb_keys if present.
25 restorecon /adb_keys
26
Alex Deymobb968fb2016-02-29 17:23:36 -080027 # Set the security context of /postinstall if present.
28 restorecon /postinstall
29
Robert Beneac6385692017-05-31 16:07:53 -070030 mkdir /acct/uid
31
Mark Salyzyn64d97d82018-04-09 09:50:32 -070032 # memory.pressure_level used by lmkd
33 chown root system /dev/memcg/memory.pressure_level
34 chmod 0040 /dev/memcg/memory.pressure_level
Robert Beneac6385692017-05-31 16:07:53 -070035 # app mem cgroups, used by activity manager, lmkd and zygote
36 mkdir /dev/memcg/apps/ 0755 system system
Robert Benea3280e482017-06-27 23:09:03 -070037 # cgroup for system_server and surfaceflinger
38 mkdir /dev/memcg/system 0550 system system
Robert Beneac6385692017-05-31 16:07:53 -070039
Maciej Żenczykowski00a21e32020-01-25 00:34:33 -080040 # symlink the Android specific /dev/tun to Linux expected /dev/net/tun
41 mkdir /dev/net 0755 root root
42 symlink ../tun /dev/net/tun
43
Tom Cherryfdeca992019-06-06 11:05:52 -070044 # set RLIMIT_NICE to allow priorities from 19 to -20
45 setrlimit nice 40 40
46
47 # Allow up to 32K FDs per process
48 setrlimit nofile 32768 32768
49
Kiyoung Kime4d3f212019-12-16 14:31:04 +090050 # Set up linker config subdirectories based on mount namespaces
51 mkdir /linkerconfig/bootstrap 0755
52 mkdir /linkerconfig/default 0755
53
Martijn Coenen9226bb32019-12-16 09:59:08 +010054 # Disable dm-verity hash prefetching, since it doesn't help performance
55 # Read more in b/136247322
56 write /sys/module/dm_verity/parameters/prefetch_cluster 0
57
Kiyoung Kim74c22922019-07-08 18:59:50 +090058 # Generate ld.config.txt for early executed processes
Kiyoung Kim03b9bca2020-11-30 14:49:36 +090059 exec -- /system/bin/bootstrap/linkerconfig --target /linkerconfig/bootstrap
Kiyoung Kime4d3f212019-12-16 14:31:04 +090060 chmod 644 /linkerconfig/bootstrap/ld.config.txt
61 copy /linkerconfig/bootstrap/ld.config.txt /linkerconfig/default/ld.config.txt
62 chmod 644 /linkerconfig/default/ld.config.txt
63
64 # Mount bootstrap linker configuration as current
65 mount none /linkerconfig/bootstrap /linkerconfig bind rec
Kiyoung Kim74c22922019-07-08 18:59:50 +090066
Colin Crossf83d0b92010-04-21 12:04:20 -070067 start ueventd
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080068
Jiyong Parkdcbaf9f2019-02-22 22:15:25 +090069 # Run apexd-bootstrap so that APEXes that provide critical libraries
70 # become available. Note that this is executed as exec_start to ensure that
71 # the libraries are available to the processes started after this statement.
72 exec_start apexd-bootstrap
73
Kiyoung Kime4d3f212019-12-16 14:31:04 +090074 # Generate linker config based on apex mounted in bootstrap namespace
75 update_linker_config
76
Tobias Thiererbda05542019-09-11 18:22:10 +010077 # These must already exist by the time boringssl_self_test32 / boringssl_self_test64 run.
78 mkdir /dev/boringssl 0755 root root
79 mkdir /dev/boringssl/selftest 0755 root root
80
Kalesh Singhccf343f2021-12-06 16:13:06 -080081 # Mount tracefs (with GID=AID_READTRACEFS)
82 mount tracefs tracefs /sys/kernel/tracing gid=3012
Kyle Lin9d19a052020-04-23 23:19:25 +080083
Jaegeuk Kim43dca3c2020-07-20 17:34:47 -070084 # create sys dirctory
85 mkdir /dev/sys 0755 system system
86 mkdir /dev/sys/fs 0755 system system
87 mkdir /dev/sys/block 0755 system system
88
Tobias Thiererbda05542019-09-11 18:22:10 +010089# Run boringssl self test for each ABI so that later processes can skip it. http://b/139348610
90on early-init && property:ro.product.cpu.abilist32=*
Tom Cherry60971e62019-09-10 10:40:47 -070091 exec_start boringssl_self_test32
Tobias Thiererbda05542019-09-11 18:22:10 +010092on early-init && property:ro.product.cpu.abilist64=*
Tom Cherry60971e62019-09-10 10:40:47 -070093 exec_start boringssl_self_test64
Tobias Thiererbda05542019-09-11 18:22:10 +010094on property:apexd.status=ready && property:ro.product.cpu.abilist32=*
Tom Cherry60971e62019-09-10 10:40:47 -070095 exec_start boringssl_self_test_apex32
96on property:apexd.status=ready && property:ro.product.cpu.abilist64=*
97 exec_start boringssl_self_test_apex64
98
99service boringssl_self_test32 /system/bin/boringssl_self_test32
Tobias Thiererf0f94382019-09-13 16:51:56 +0100100 setenv BORINGSSL_SELF_TEST_CREATE_FLAG true # Any nonempty value counts as true
Tom Cherrya76bfb22019-09-18 09:41:36 -0700101 reboot_on_failure reboot,boringssl-self-check-failed
Tom Cherryf5e872e2019-09-23 16:21:31 -0700102 stdio_to_kmsg
Tom Cherry60971e62019-09-10 10:40:47 -0700103
104service boringssl_self_test64 /system/bin/boringssl_self_test64
Tobias Thiererf0f94382019-09-13 16:51:56 +0100105 setenv BORINGSSL_SELF_TEST_CREATE_FLAG true # Any nonempty value counts as true
Tom Cherrya76bfb22019-09-18 09:41:36 -0700106 reboot_on_failure reboot,boringssl-self-check-failed
Tom Cherryf5e872e2019-09-23 16:21:31 -0700107 stdio_to_kmsg
Tom Cherry60971e62019-09-10 10:40:47 -0700108
109service boringssl_self_test_apex32 /apex/com.android.conscrypt/bin/boringssl_self_test32
Tobias Thiererf0f94382019-09-13 16:51:56 +0100110 setenv BORINGSSL_SELF_TEST_CREATE_FLAG true # Any nonempty value counts as true
Tom Cherrya76bfb22019-09-18 09:41:36 -0700111 reboot_on_failure reboot,boringssl-self-check-failed
Tom Cherryf5e872e2019-09-23 16:21:31 -0700112 stdio_to_kmsg
Tom Cherry60971e62019-09-10 10:40:47 -0700113
114service boringssl_self_test_apex64 /apex/com.android.conscrypt/bin/boringssl_self_test64
Tobias Thiererf0f94382019-09-13 16:51:56 +0100115 setenv BORINGSSL_SELF_TEST_CREATE_FLAG true # Any nonempty value counts as true
Tom Cherrya76bfb22019-09-18 09:41:36 -0700116 reboot_on_failure reboot,boringssl-self-check-failed
Tom Cherryf5e872e2019-09-23 16:21:31 -0700117 stdio_to_kmsg
Tobias Thiererbda05542019-09-11 18:22:10 +0100118
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800119on init
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700120 sysclktz 0
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800121
Nick Kralevich27cb4102016-01-22 18:02:29 -0800122 # Mix device-specific information into the entropy pool
123 copy /proc/cmdline /dev/urandom
Wei Wang0d78bfb2019-01-25 09:31:28 -0800124 copy /system/etc/prop.default /dev/urandom
Nick Kralevich27cb4102016-01-22 18:02:29 -0800125
Elliott Hughes5a0a51b2018-08-22 13:21:21 -0700126 symlink /proc/self/fd/0 /dev/stdin
127 symlink /proc/self/fd/1 /dev/stdout
128 symlink /proc/self/fd/2 /dev/stderr
129
Todd Kjosba8a4752015-10-26 16:22:11 -0700130 # Create energy-aware scheduler tuning nodes
Todd Kjos11cde562016-02-23 09:00:36 -0800131 mkdir /dev/stune/foreground
Tim Murray5dcff8f2016-07-11 13:57:31 -0700132 mkdir /dev/stune/background
Tim Murray955694b2016-07-11 11:40:15 -0700133 mkdir /dev/stune/top-app
Joel Fernandesf50d1092016-12-19 11:01:55 -0800134 mkdir /dev/stune/rt
Todd Kjos11cde562016-02-23 09:00:36 -0800135 chown system system /dev/stune
136 chown system system /dev/stune/foreground
Tim Murray5dcff8f2016-07-11 13:57:31 -0700137 chown system system /dev/stune/background
Tim Murray955694b2016-07-11 11:40:15 -0700138 chown system system /dev/stune/top-app
Joel Fernandesf50d1092016-12-19 11:01:55 -0800139 chown system system /dev/stune/rt
Todd Kjos11cde562016-02-23 09:00:36 -0800140 chown system system /dev/stune/tasks
141 chown system system /dev/stune/foreground/tasks
Tim Murray5dcff8f2016-07-11 13:57:31 -0700142 chown system system /dev/stune/background/tasks
Tim Murray955694b2016-07-11 11:40:15 -0700143 chown system system /dev/stune/top-app/tasks
Joel Fernandesf50d1092016-12-19 11:01:55 -0800144 chown system system /dev/stune/rt/tasks
Suren Baghdasaryan2e7799a2022-01-20 17:55:27 -0800145 chown system system /dev/stune/cgroup.procs
146 chown system system /dev/stune/foreground/cgroup.procs
147 chown system system /dev/stune/background/cgroup.procs
148 chown system system /dev/stune/top-app/cgroup.procs
149 chown system system /dev/stune/rt/cgroup.procs
Todd Kjos11cde562016-02-23 09:00:36 -0800150 chmod 0664 /dev/stune/tasks
151 chmod 0664 /dev/stune/foreground/tasks
Tim Murray5dcff8f2016-07-11 13:57:31 -0700152 chmod 0664 /dev/stune/background/tasks
Tim Murray955694b2016-07-11 11:40:15 -0700153 chmod 0664 /dev/stune/top-app/tasks
Joel Fernandesf50d1092016-12-19 11:01:55 -0800154 chmod 0664 /dev/stune/rt/tasks
Suren Baghdasaryan2e7799a2022-01-20 17:55:27 -0800155 chmod 0664 /dev/stune/cgroup.procs
156 chmod 0664 /dev/stune/foreground/cgroup.procs
157 chmod 0664 /dev/stune/background/cgroup.procs
158 chmod 0664 /dev/stune/top-app/cgroup.procs
159 chmod 0664 /dev/stune/rt/cgroup.procs
Todd Kjosba8a4752015-10-26 16:22:11 -0700160
Suren Baghdasaryanc6baa192020-10-13 10:41:00 -0700161 # cpuctl hierarchy for devices using utilclamp
162 mkdir /dev/cpuctl/foreground
163 mkdir /dev/cpuctl/background
164 mkdir /dev/cpuctl/top-app
165 mkdir /dev/cpuctl/rt
Wei Wang77cb6a02020-11-18 16:04:08 -0800166 mkdir /dev/cpuctl/system
Wei Wangab879792020-11-24 00:26:40 -0800167 mkdir /dev/cpuctl/system-background
Rick Yiu014446d2021-10-20 22:52:43 +0800168 mkdir /dev/cpuctl/dex2oat
Suren Baghdasaryanc6baa192020-10-13 10:41:00 -0700169 chown system system /dev/cpuctl
170 chown system system /dev/cpuctl/foreground
171 chown system system /dev/cpuctl/background
172 chown system system /dev/cpuctl/top-app
173 chown system system /dev/cpuctl/rt
Wei Wang77cb6a02020-11-18 16:04:08 -0800174 chown system system /dev/cpuctl/system
Wei Wangab879792020-11-24 00:26:40 -0800175 chown system system /dev/cpuctl/system-background
Rick Yiu014446d2021-10-20 22:52:43 +0800176 chown system system /dev/cpuctl/dex2oat
Suren Baghdasaryanc6baa192020-10-13 10:41:00 -0700177 chown system system /dev/cpuctl/tasks
178 chown system system /dev/cpuctl/foreground/tasks
179 chown system system /dev/cpuctl/background/tasks
180 chown system system /dev/cpuctl/top-app/tasks
181 chown system system /dev/cpuctl/rt/tasks
Wei Wang77cb6a02020-11-18 16:04:08 -0800182 chown system system /dev/cpuctl/system/tasks
Wei Wangab879792020-11-24 00:26:40 -0800183 chown system system /dev/cpuctl/system-background/tasks
Rick Yiu014446d2021-10-20 22:52:43 +0800184 chown system system /dev/cpuctl/dex2oat/tasks
Suren Baghdasaryan2e7799a2022-01-20 17:55:27 -0800185 chown system system /dev/cpuctl/cgroup.procs
186 chown system system /dev/cpuctl/foreground/cgroup.procs
187 chown system system /dev/cpuctl/background/cgroup.procs
188 chown system system /dev/cpuctl/top-app/cgroup.procs
189 chown system system /dev/cpuctl/rt/cgroup.procs
190 chown system system /dev/cpuctl/system/cgroup.procs
191 chown system system /dev/cpuctl/system-background/cgroup.procs
192 chown system system /dev/cpuctl/dex2oat/cgroup.procs
Suren Baghdasaryanc6baa192020-10-13 10:41:00 -0700193 chmod 0664 /dev/cpuctl/tasks
194 chmod 0664 /dev/cpuctl/foreground/tasks
195 chmod 0664 /dev/cpuctl/background/tasks
196 chmod 0664 /dev/cpuctl/top-app/tasks
197 chmod 0664 /dev/cpuctl/rt/tasks
Wei Wang77cb6a02020-11-18 16:04:08 -0800198 chmod 0664 /dev/cpuctl/system/tasks
Wei Wangab879792020-11-24 00:26:40 -0800199 chmod 0664 /dev/cpuctl/system-background/tasks
Rick Yiu014446d2021-10-20 22:52:43 +0800200 chmod 0664 /dev/cpuctl/dex2oat/tasks
Suren Baghdasaryan2e7799a2022-01-20 17:55:27 -0800201 chmod 0664 /dev/cpuctl/cgroup.procs
202 chmod 0664 /dev/cpuctl/foreground/cgroup.procs
203 chmod 0664 /dev/cpuctl/background/cgroup.procs
204 chmod 0664 /dev/cpuctl/top-app/cgroup.procs
205 chmod 0664 /dev/cpuctl/rt/cgroup.procs
206 chmod 0664 /dev/cpuctl/system/cgroup.procs
207 chmod 0664 /dev/cpuctl/system-background/cgroup.procs
208 chmod 0664 /dev/cpuctl/dex2oat/cgroup.procs
Wei Wang77cb6a02020-11-18 16:04:08 -0800209
210 # Create a cpu group for NNAPI HAL processes
211 mkdir /dev/cpuctl/nnapi-hal
212 chown system system /dev/cpuctl/nnapi-hal
213 chown system system /dev/cpuctl/nnapi-hal/tasks
Suren Baghdasaryan2e7799a2022-01-20 17:55:27 -0800214 chown system system /dev/cpuctl/nnapi-hal/cgroup.procs
Wei Wang77cb6a02020-11-18 16:04:08 -0800215 chmod 0664 /dev/cpuctl/nnapi-hal/tasks
Suren Baghdasaryan2e7799a2022-01-20 17:55:27 -0800216 chmod 0664 /dev/cpuctl/nnapi-hal/cgroup.procs
Wei Wang77cb6a02020-11-18 16:04:08 -0800217 write /dev/cpuctl/nnapi-hal/cpu.uclamp.min 1
218 write /dev/cpuctl/nnapi-hal/cpu.uclamp.latency_sensitive 1
219
Rick Yiua983f8a2020-12-01 15:45:01 +0800220 # Create a cpu group for camera daemon processes
221 mkdir /dev/cpuctl/camera-daemon
222 chown system system /dev/cpuctl/camera-daemon
223 chown system system /dev/cpuctl/camera-daemon/tasks
Suren Baghdasaryan2e7799a2022-01-20 17:55:27 -0800224 chown system system /dev/cpuctl/camera-daemon/cgroup.procs
Rick Yiua983f8a2020-12-01 15:45:01 +0800225 chmod 0664 /dev/cpuctl/camera-daemon/tasks
Suren Baghdasaryan2e7799a2022-01-20 17:55:27 -0800226 chmod 0664 /dev/cpuctl/camera-daemon/cgroup.procs
Rick Yiua983f8a2020-12-01 15:45:01 +0800227
Wei Wang6a285722020-11-30 10:56:29 -0800228 # Create an stune group for camera-specific processes
229 mkdir /dev/stune/camera-daemon
230 chown system system /dev/stune/camera-daemon
231 chown system system /dev/stune/camera-daemon/tasks
Suren Baghdasaryan2e7799a2022-01-20 17:55:27 -0800232 chown system system /dev/stune/camera-daemon/cgroup.procs
Wei Wang6a285722020-11-30 10:56:29 -0800233 chmod 0664 /dev/stune/camera-daemon/tasks
Suren Baghdasaryan2e7799a2022-01-20 17:55:27 -0800234 chmod 0664 /dev/stune/camera-daemon/cgroup.procs
Wei Wang6a285722020-11-30 10:56:29 -0800235
Miao Wangc3991a72020-02-07 15:01:24 -0800236 # Create an stune group for NNAPI HAL processes
237 mkdir /dev/stune/nnapi-hal
238 chown system system /dev/stune/nnapi-hal
239 chown system system /dev/stune/nnapi-hal/tasks
Suren Baghdasaryan2e7799a2022-01-20 17:55:27 -0800240 chown system system /dev/stune/nnapi-hal/cgroup.procs
Miao Wangc3991a72020-02-07 15:01:24 -0800241 chmod 0664 /dev/stune/nnapi-hal/tasks
Suren Baghdasaryan2e7799a2022-01-20 17:55:27 -0800242 chmod 0664 /dev/stune/nnapi-hal/cgroup.procs
Miao Wangc3991a72020-02-07 15:01:24 -0800243 write /dev/stune/nnapi-hal/schedtune.boost 1
244 write /dev/stune/nnapi-hal/schedtune.prefer_idle 1
245
Jeff Sharkeyfc000482015-03-16 10:17:47 -0700246 restorecon_recursive /mnt
Jeff Sharkey5dd0f862012-08-17 16:01:16 -0700247
Luis Hector Chavez87749452018-02-14 08:35:01 -0800248 mount configfs none /config nodev noexec nosuid
Daniel Rosenberg79035232017-11-29 14:49:08 -0800249 chmod 0770 /config/sdcardfs
Daniel Rosenberg4edec252016-02-18 19:48:31 -0800250 chown system package_info /config/sdcardfs
251
Hridya Valsarajub237d762020-02-03 12:33:57 -0800252 # Mount binderfs
253 mkdir /dev/binderfs
254 mount binder binder /dev/binderfs stats=global
255 chmod 0755 /dev/binderfs
256
Martijn Coenen959dcf12020-04-28 22:27:10 +0200257 # Mount fusectl
258 mount fusectl none /sys/fs/fuse/connections
259
Hridya Valsarajub237d762020-02-03 12:33:57 -0800260 symlink /dev/binderfs/binder /dev/binder
261 symlink /dev/binderfs/hwbinder /dev/hwbinder
262 symlink /dev/binderfs/vndbinder /dev/vndbinder
263
264 chmod 0666 /dev/binderfs/hwbinder
265 chmod 0666 /dev/binderfs/binder
266 chmod 0666 /dev/binderfs/vndbinder
267
San Mehat6ea3cc62010-02-19 18:25:22 -0800268 mkdir /mnt/secure 0700 root root
Jeff Sharkeyfc000482015-03-16 10:17:47 -0700269 mkdir /mnt/secure/asec 0700 root root
270 mkdir /mnt/asec 0755 root system
271 mkdir /mnt/obb 0755 root system
Zimc1b53de2020-01-24 22:13:58 +0000272 mkdir /mnt/media_rw 0750 root external_storage
Jeff Sharkeyfc000482015-03-16 10:17:47 -0700273 mkdir /mnt/user 0755 root root
274 mkdir /mnt/user/0 0755 root root
Zimc9f8e5d2019-08-09 20:02:49 +0100275 mkdir /mnt/user/0/self 0755 root root
276 mkdir /mnt/user/0/emulated 0755 root root
277 mkdir /mnt/user/0/emulated/0 0755 root root
Zimfc64dad2019-09-23 14:21:27 +0100278
279 # Prepare directories for pass through processes
Zim6ca090e2020-01-20 14:16:14 +0000280 mkdir /mnt/pass_through 0700 root root
Zima67b40b2020-01-31 16:26:13 +0000281 mkdir /mnt/pass_through/0 0710 root media_rw
282 mkdir /mnt/pass_through/0/self 0710 root media_rw
283 mkdir /mnt/pass_through/0/emulated 0710 root media_rw
284 mkdir /mnt/pass_through/0/emulated/0 0710 root media_rw
Zimfc64dad2019-09-23 14:21:27 +0100285
Jeff Sharkeyae0a5ac2015-04-06 14:08:54 -0700286 mkdir /mnt/expand 0771 system system
Daichi Hirono7abc71e2015-12-11 13:29:04 +0900287 mkdir /mnt/appfuse 0711 root root
San Mehat6ea3cc62010-02-19 18:25:22 -0800288
Jeff Sharkeyf38f29c2015-06-23 14:30:37 -0700289 # Storage views to support runtime permissions
Jeff Sharkeyb9f438f2015-08-06 11:39:44 -0700290 mkdir /mnt/runtime 0700 root root
291 mkdir /mnt/runtime/default 0755 root root
292 mkdir /mnt/runtime/default/self 0755 root root
293 mkdir /mnt/runtime/read 0755 root root
294 mkdir /mnt/runtime/read/self 0755 root root
295 mkdir /mnt/runtime/write 0755 root root
296 mkdir /mnt/runtime/write/self 0755 root root
Sudheer Shanka81c687d2019-01-16 23:25:28 -0800297 mkdir /mnt/runtime/full 0755 root root
298 mkdir /mnt/runtime/full/self 0755 root root
San Mehat6ea3cc62010-02-19 18:25:22 -0800299
Jeff Sharkeyfc000482015-03-16 10:17:47 -0700300 # Symlink to keep legacy apps working in multi-user world
Nick Kralevichd2f0a2c2016-04-12 20:36:01 -0700301 symlink /storage/self/primary /mnt/sdcard
Jeff Sharkeyb9f438f2015-08-06 11:39:44 -0700302 symlink /mnt/user/0/primary /mnt/runtime/default/self/primary
Kenny Rootc7858a32010-07-15 12:14:44 -0700303
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800304 write /proc/sys/kernel/panic_on_oops 1
305 write /proc/sys/kernel/hung_task_timeout_secs 0
306 write /proc/cpu/alignment 4
Riley Andrewse850f572015-07-20 16:01:48 -0700307
308 # scheduler tunables
309 # Disable auto-scaling of scheduler tunables with hotplug. The tunables
310 # will vary across devices in unpredictable ways if allowed to scale with
311 # cpu cores.
312 write /proc/sys/kernel/sched_tunable_scaling 0
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800313 write /proc/sys/kernel/sched_latency_ns 10000000
314 write /proc/sys/kernel/sched_wakeup_granularity_ns 2000000
San Mehat7baff712009-09-16 13:32:23 -0700315 write /proc/sys/kernel/sched_child_runs_first 0
Riley Andrewse850f572015-07-20 16:01:48 -0700316
Nick Kralevichd707fb32011-10-06 11:47:11 -0700317 write /proc/sys/kernel/randomize_va_space 2
Nick Kralevich27cca212011-12-05 14:48:08 -0800318 write /proc/sys/vm/mmap_min_addr 32768
Nick Kralevichbe341cc2013-02-21 18:36:43 -0800319 write /proc/sys/net/ipv4/ping_group_range "0 2147483647"
Mark Salyzyn39944c82015-09-08 11:24:07 -0700320 write /proc/sys/net/unix/max_dgram_qlen 600
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800321
Sandeep Patil5fee4962016-12-07 10:55:45 -0800322 # Assign reasonable ceiling values for socket rcv/snd buffers.
323 # These should almost always be overridden by the target per the
324 # the corresponding technology maximums.
325 write /proc/sys/net/core/rmem_max 262144
326 write /proc/sys/net/core/wmem_max 262144
327
Sreeram Ramachandranfd949222014-04-09 17:44:56 -0700328 # reflect fwmark from incoming packets onto generated replies
329 write /proc/sys/net/ipv4/fwmark_reflect 1
330 write /proc/sys/net/ipv6/fwmark_reflect 1
331
332 # set fwmark on accepted sockets
333 write /proc/sys/net/ipv4/tcp_fwmark_accept 1
334
Greg Hackmannf3fd1222014-12-03 09:57:00 -0800335 # disable icmp redirects
336 write /proc/sys/net/ipv4/conf/all/accept_redirects 0
337 write /proc/sys/net/ipv6/conf/all/accept_redirects 0
338
Nick Kralevich15ffc532017-08-25 12:55:52 -0700339 # /proc/net/fib_trie leaks interface IP addresses
340 chmod 0400 /proc/net/fib_trie
341
Tim Murrayb769c8d2015-06-08 14:56:29 -0700342 # sets up initial cpusets for ActivityManager
Tim Murrayb769c8d2015-06-08 14:56:29 -0700343 # this ensures that the cpusets are present and usable, but the device's
344 # init.rc must actually set the correct cpus
Tim Murrayf429d372015-10-15 12:38:15 -0700345 mkdir /dev/cpuset/foreground
Wei Wang8dbd12b2017-04-13 18:27:35 -0700346 copy /dev/cpuset/cpus /dev/cpuset/foreground/cpus
347 copy /dev/cpuset/mems /dev/cpuset/foreground/mems
Tim Murrayf429d372015-10-15 12:38:15 -0700348 mkdir /dev/cpuset/background
Wei Wang8dbd12b2017-04-13 18:27:35 -0700349 copy /dev/cpuset/cpus /dev/cpuset/background/cpus
350 copy /dev/cpuset/mems /dev/cpuset/background/mems
Tim Murrayf429d372015-10-15 12:38:15 -0700351
352 # system-background is for system tasks that should only run on
353 # little cores, not on bigs
Tim Murrayf429d372015-10-15 12:38:15 -0700354 mkdir /dev/cpuset/system-background
Wei Wang8dbd12b2017-04-13 18:27:35 -0700355 copy /dev/cpuset/cpus /dev/cpuset/system-background/cpus
356 copy /dev/cpuset/mems /dev/cpuset/system-background/mems
Tim Murrayf429d372015-10-15 12:38:15 -0700357
Tim Murray658ae902018-04-13 10:15:49 -0700358 # restricted is for system tasks that are being throttled
359 # due to screen off.
360 mkdir /dev/cpuset/restricted
361 copy /dev/cpuset/cpus /dev/cpuset/restricted/cpus
362 copy /dev/cpuset/mems /dev/cpuset/restricted/mems
363
Tim Murray6647bb52016-01-11 16:16:35 -0800364 mkdir /dev/cpuset/top-app
Wei Wang8dbd12b2017-04-13 18:27:35 -0700365 copy /dev/cpuset/cpus /dev/cpuset/top-app/cpus
366 copy /dev/cpuset/mems /dev/cpuset/top-app/mems
Tim Murray6647bb52016-01-11 16:16:35 -0800367
Rick Yiua983f8a2020-12-01 15:45:01 +0800368 # create a cpuset for camera daemon processes
369 mkdir /dev/cpuset/camera-daemon
370 copy /dev/cpuset/cpus /dev/cpuset/camera-daemon/cpus
371 copy /dev/cpuset/mems /dev/cpuset/camera-daemon/mems
372
Tim Murrayf429d372015-10-15 12:38:15 -0700373 # change permissions for all cpusets we'll touch at runtime
Tim Murrayb769c8d2015-06-08 14:56:29 -0700374 chown system system /dev/cpuset
375 chown system system /dev/cpuset/foreground
376 chown system system /dev/cpuset/background
Todd Kjosba8a4752015-10-26 16:22:11 -0700377 chown system system /dev/cpuset/system-background
Tim Murray6647bb52016-01-11 16:16:35 -0800378 chown system system /dev/cpuset/top-app
Tim Murray658ae902018-04-13 10:15:49 -0700379 chown system system /dev/cpuset/restricted
Rick Yiua983f8a2020-12-01 15:45:01 +0800380 chown system system /dev/cpuset/camera-daemon
Tim Murrayb769c8d2015-06-08 14:56:29 -0700381 chown system system /dev/cpuset/tasks
382 chown system system /dev/cpuset/foreground/tasks
383 chown system system /dev/cpuset/background/tasks
Todd Kjosba8a4752015-10-26 16:22:11 -0700384 chown system system /dev/cpuset/system-background/tasks
Tim Murray6647bb52016-01-11 16:16:35 -0800385 chown system system /dev/cpuset/top-app/tasks
Tim Murray658ae902018-04-13 10:15:49 -0700386 chown system system /dev/cpuset/restricted/tasks
Rick Yiua983f8a2020-12-01 15:45:01 +0800387 chown system system /dev/cpuset/camera-daemon/tasks
Suren Baghdasaryan2e7799a2022-01-20 17:55:27 -0800388 chown system system /dev/cpuset/cgroup.procs
389 chown system system /dev/cpuset/foreground/cgroup.procs
390 chown system system /dev/cpuset/background/cgroup.procs
391 chown system system /dev/cpuset/system-background/cgroup.procs
392 chown system system /dev/cpuset/top-app/cgroup.procs
393 chown system system /dev/cpuset/restricted/cgroup.procs
394 chown system system /dev/cpuset/camera-daemon/cgroup.procs
Tim Murray4284f9f2015-11-10 14:31:09 -0800395
396 # set system-background to 0775 so SurfaceFlinger can touch it
397 chmod 0775 /dev/cpuset/system-background
398
Jeff Vander Stoep3f62a022015-07-23 15:18:36 -0700399 chmod 0664 /dev/cpuset/foreground/tasks
400 chmod 0664 /dev/cpuset/background/tasks
Todd Kjosba8a4752015-10-26 16:22:11 -0700401 chmod 0664 /dev/cpuset/system-background/tasks
Tim Murray6647bb52016-01-11 16:16:35 -0800402 chmod 0664 /dev/cpuset/top-app/tasks
Tim Murray658ae902018-04-13 10:15:49 -0700403 chmod 0664 /dev/cpuset/restricted/tasks
Jeff Vander Stoep3f62a022015-07-23 15:18:36 -0700404 chmod 0664 /dev/cpuset/tasks
Rick Yiua983f8a2020-12-01 15:45:01 +0800405 chmod 0664 /dev/cpuset/camera-daemon/tasks
Suren Baghdasaryan2e7799a2022-01-20 17:55:27 -0800406 chmod 0664 /dev/cpuset/foreground/cgroup.procs
407 chmod 0664 /dev/cpuset/background/cgroup.procs
408 chmod 0664 /dev/cpuset/system-background/cgroup.procs
409 chmod 0664 /dev/cpuset/top-app/cgroup.procs
410 chmod 0664 /dev/cpuset/restricted/cgroup.procs
411 chmod 0664 /dev/cpuset/cgroup.procs
412 chmod 0664 /dev/cpuset/camera-daemon/cgroup.procs
Tim Murrayb769c8d2015-06-08 14:56:29 -0700413
Tim Murray1504cb52019-02-15 11:51:09 -0800414 # make the PSI monitor accessible to others
415 chown system system /proc/pressure/memory
416 chmod 0664 /proc/pressure/memory
Tim Murrayb769c8d2015-06-08 14:56:29 -0700417
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700418 # qtaguid will limit access to specific data based on group memberships.
419 # net_bw_acct grants impersonation of socket owners.
420 # net_bw_stats grants access to other apps' detailed tagged-socket stats.
JP Abgrall3e54aab2013-01-04 14:34:58 -0800421 chown root net_bw_acct /proc/net/xt_qtaguid/ctrl
422 chown root net_bw_stats /proc/net/xt_qtaguid/stats
423
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700424 # Allow everybody to read the xt_qtaguid resource tracking misc dev.
425 # This is needed by any process that uses socket tagging.
JP Abgrall8e3ff702011-09-11 16:12:27 -0700426 chmod 0644 /dev/xt_qtaguid
427
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -0800428 mount bpf bpf /sys/fs/bpf nodev noexec nosuid
Chenbo Feng2cba6f22017-10-23 11:57:59 -0700429
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700430 # Create location for fs_mgr to store abbreviated output from filesystem
431 # checker programs.
Ken Sumrall4eaf9052013-09-18 17:49:21 -0700432 mkdir /dev/fscklogs 0770 root system
433
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700434 # pstore/ramoops previous console log
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -0800435 mount pstore pstore /sys/fs/pstore nodev noexec nosuid
Mark Salyzyn7ab805e2018-06-29 10:32:11 -0700436 chown system log /sys/fs/pstore
437 chmod 0550 /sys/fs/pstore
Todd Poynor479efb52013-11-21 20:23:54 -0800438 chown system log /sys/fs/pstore/console-ramoops
439 chmod 0440 /sys/fs/pstore/console-ramoops
Mark Salyzyn4eb0ba02017-06-27 09:32:32 -0700440 chown system log /sys/fs/pstore/console-ramoops-0
441 chmod 0440 /sys/fs/pstore/console-ramoops-0
Mark Salyzyn4b0313e2014-12-15 07:52:19 -0800442 chown system log /sys/fs/pstore/pmsg-ramoops-0
443 chmod 0440 /sys/fs/pstore/pmsg-ramoops-0
Todd Poynor479efb52013-11-21 20:23:54 -0800444
Greg Hackmanncee87572015-01-26 10:40:29 -0800445 # enable armv8_deprecated instruction hooks
446 write /proc/sys/abi/swp 1
447
Greg Hackmann40a96e42016-02-01 09:59:44 -0800448 # Linux's execveat() syscall may construct paths containing /dev/fd
449 # expecting it to point to /proc/self/fd
450 symlink /proc/self/fd /dev/fd
451
Yueyao (Nathan) Zhu60c6dac2016-06-21 12:04:54 -0700452 export DOWNLOAD_CACHE /data/cache
453
David Lin27b2c1e2017-03-08 17:36:18 -0800454 # This allows the ledtrig-transient properties to be created here so
455 # that they can be chown'd to system:system later on boot
456 write /sys/class/leds/vibrator/trigger "transient"
457
Haibo Huangd60a19b2018-11-04 09:50:05 -0800458 # This is used by Bionic to select optimized routines.
459 write /dev/cpu_variant:${ro.bionic.arch} ${ro.bionic.cpu_variant}
460 chmod 0444 /dev/cpu_variant:${ro.bionic.arch}
461 write /dev/cpu_variant:${ro.bionic.2nd_arch} ${ro.bionic.2nd_cpu_variant}
462 chmod 0444 /dev/cpu_variant:${ro.bionic.2nd_arch}
463
Yifan Hongc9a9d272019-04-08 13:29:07 -0700464 # Allow system processes to read / write power state.
465 chown system system /sys/power/state
466 chown system system /sys/power/wakeup_count
467 chmod 0660 /sys/power/state
468
Tri Voc6a84e82019-07-16 14:31:55 -0700469 chown radio wakelock /sys/power/wake_lock
470 chown radio wakelock /sys/power/wake_unlock
471 chmod 0660 /sys/power/wake_lock
472 chmod 0660 /sys/power/wake_unlock
473
Tom Cherryf18b7482018-10-17 13:14:55 -0700474 # Start logd before any other services run to ensure we capture all of their logs.
475 start logd
Suren Baghdasaryanc29c2ba2019-10-22 17:18:42 -0700476 # Start lmkd before any other services run so that it can register them
Martin Liu9f8b0242021-07-01 11:55:02 +0800477 write /proc/sys/vm/watermark_boost_factor 0
Suren Baghdasaryan68986822020-02-13 16:17:10 -0800478 chown root system /sys/module/lowmemorykiller/parameters/adj
479 chmod 0664 /sys/module/lowmemorykiller/parameters/adj
480 chown root system /sys/module/lowmemorykiller/parameters/minfree
481 chmod 0664 /sys/module/lowmemorykiller/parameters/minfree
Suren Baghdasaryanc29c2ba2019-10-22 17:18:42 -0700482 start lmkd
Jiyong Park407b0002019-02-02 19:45:23 +0900483
Tom Cherryf18b7482018-10-17 13:14:55 -0700484 # Start essential services.
485 start servicemanager
486 start hwservicemanager
487 start vndservicemanager
488
Riley Andrewse4b7b292014-06-16 15:06:21 -0700489# Healthd can trigger a full boot from charger mode by signaling this
490# property when the power button is held.
491on property:sys.boot_from_charger_mode=1
492 class_stop charger
493 trigger late-init
494
Riley Andrews80c7a5e2014-07-11 15:05:23 -0700495# Indicate to fw loaders that the relevant mounts are up.
496on firmware_mounts_complete
497 rm /dev/.booting
498
Riley Andrewse4b7b292014-06-16 15:06:21 -0700499# Mount filesystems and start core system services.
500on late-init
501 trigger early-fs
Wei Wangabfbec32016-08-23 11:58:09 -0700502
503 # Mount fstab in init.{$device}.rc by mount_all command. Optional parameter
504 # '--early' can be specified to skip entries with 'latemount'.
505 # /system and /vendor must be mounted by the end of the fs stage,
506 # while /data is optional.
Riley Andrewse4b7b292014-06-16 15:06:21 -0700507 trigger fs
508 trigger post-fs
Riley Andrewse4b7b292014-06-16 15:06:21 -0700509
Wei Wangabfbec32016-08-23 11:58:09 -0700510 # Mount fstab in init.{$device}.rc by mount_all with '--late' parameter
511 # to only mount entries with 'latemount'. This is needed if '--early' is
512 # specified in the previous mount_all command on the fs stage.
513 # With /system mounted and properties form /system + /factory available,
514 # some services can be started.
515 trigger late-fs
516
Paul Lawrence948410a2015-07-01 14:40:56 -0700517 # Now we can mount /data. File encryption requires keymaster to decrypt
Wei Wangabfbec32016-08-23 11:58:09 -0700518 # /data, which in turn can only be loaded when system properties are present.
Paul Lawrence948410a2015-07-01 14:40:56 -0700519 trigger post-fs-data
Wei Wangabfbec32016-08-23 11:58:09 -0700520
Maciej Żenczykowski6c72c162020-06-22 01:11:24 -0700521 # Should be before netd, but after apex, properties and logging is available.
522 trigger load_bpf_programs
523
Wei Wangfa14d212018-09-05 10:12:40 -0700524 # Now we can start zygote for devices with file based encryption
525 trigger zygote-start
526
Riley Andrews67cb1ae2014-07-15 20:39:41 -0700527 # Remove a file to wake up anything waiting for firmware.
528 trigger firmware_mounts_complete
529
Riley Andrewse4b7b292014-06-16 15:06:21 -0700530 trigger early-boot
531 trigger boot
532
Daniel Rosenberg1be83e32019-06-17 13:23:05 -0700533on early-fs
534 # Once metadata has been mounted, we'll need vold to deal with userdata checkpointing
Daniel Rosenberg6156b9b2018-10-11 15:35:07 -0700535 start vold
Daniel Rosenberg1be83e32019-06-17 13:23:05 -0700536
537on post-fs
Daniel Rosenberg6156b9b2018-10-11 15:35:07 -0700538 exec - system system -- /system/bin/vdc checkpoint markBootAttempt
Steven Morelandd6275022017-03-24 16:23:07 +0000539
Luis Hector Chavez30780a72018-02-14 08:36:16 -0800540 # Once everything is setup, no need to modify /.
Luis Hector Chavezd07d0942018-07-11 08:13:34 -0700541 # The bind+remount combination allows this to work in containers.
542 mount rootfs rootfs / remount bind ro nodev
Brian Swetland56de7a12010-09-08 15:06:45 -0700543
Zimc46c2352020-09-11 11:06:29 +0100544 # Mount default storage into root namespace
545 mount none /mnt/user/0 /storage bind rec
546 mount none none /storage slave rec
547
Nick Kralevich715c4dc2015-12-07 16:57:08 -0800548 # Make sure /sys/kernel/debug (if present) is labeled properly
Paul Lawrencea8d84342016-11-14 15:40:18 -0800549 # Note that tracefs may be mounted under debug, so we need to cross filesystems
550 restorecon --recursive --cross-filesystems /sys/kernel/debug
Paul Lawrenced2abcbd2016-11-02 14:23:31 -0700551
Ken Sumrall752923c2010-12-03 16:33:31 -0800552 # We chown/chmod /cache again so because mount is run as root + defaults
553 chown system cache /cache
554 chmod 0770 /cache
Stephen Smalley1eee4192012-01-13 08:54:34 -0500555 # We restorecon /cache in case the cache partition has been reset.
Nick Kraleviche1695912014-07-09 12:39:21 -0700556 restorecon_recursive /cache
Ken Sumrall752923c2010-12-03 16:33:31 -0800557
Tao Baoe48aed02015-05-11 14:08:18 -0700558 # Create /cache/recovery in case it's not there. It'll also fix the odd
559 # permissions if created by the recovery system.
560 mkdir /cache/recovery 0770 system cache
Ken Sumrall752923c2010-12-03 16:33:31 -0800561
Christopher Tate63c463f2016-01-28 17:09:42 -0800562 # Backup/restore mechanism uses the cache partition
563 mkdir /cache/backup_stage 0700 system system
564 mkdir /cache/backup 0700 system system
565
Ken Sumrall752923c2010-12-03 16:33:31 -0800566 #change permissions on vmallocinfo so we can grab it from bugreports
567 chown root log /proc/vmallocinfo
568 chmod 0440 /proc/vmallocinfo
569
Dima Zavin94812662012-09-25 14:22:02 -0700570 chown root log /proc/slabinfo
571 chmod 0440 /proc/slabinfo
572
Martin Liu0abd0d62020-06-14 17:21:13 +0800573 chown root log /proc/pagetypeinfo
574 chmod 0440 /proc/pagetypeinfo
575
Ken Sumrall752923c2010-12-03 16:33:31 -0800576 #change permissions on kmsg & sysrq-trigger so bugreports can grab kthread stacks
577 chown root system /proc/kmsg
578 chmod 0440 /proc/kmsg
579 chown root system /proc/sysrq-trigger
580 chmod 0220 /proc/sysrq-trigger
Colin Crossb35e36e2012-08-02 18:14:33 -0700581 chown system log /proc/last_kmsg
582 chmod 0440 /proc/last_kmsg
Ken Sumrall752923c2010-12-03 16:33:31 -0800583
dcashman5822a4a2014-03-25 16:31:07 -0700584 # make the selinux kernel policy world-readable
585 chmod 0444 /sys/fs/selinux/policy
586
Ken Sumrall752923c2010-12-03 16:33:31 -0800587 # create the lost+found directories, so as to enforce our permissions
Chia-chi Yehea744142011-07-08 16:52:18 -0700588 mkdir /cache/lost+found 0770 root root
Ken Sumrall752923c2010-12-03 16:33:31 -0800589
Paul Crowleyfe305ab2018-05-17 10:12:34 -0700590 restorecon_recursive /metadata
591 mkdir /metadata/vold
592 chmod 0700 /metadata/vold
David Anderson0664f312019-03-05 22:16:36 -0800593 mkdir /metadata/password_slots 0771 root system
Mark Salyzynee016ce2019-05-23 10:00:34 -0700594 mkdir /metadata/bootstat 0750 system log
David Anderson001747e2019-07-03 15:10:53 -0700595 mkdir /metadata/ota 0700 root system
David Anderson456e5012019-08-01 14:37:35 -0700596 mkdir /metadata/ota/snapshots 0700 root system
Gavin Corkery8c922562020-05-11 14:10:09 +0100597 mkdir /metadata/userspacereboot 0770 root system
Gavin Corkerybadf3962020-12-05 17:25:09 +0000598 mkdir /metadata/watchdog 0770 root system
Paul Crowleyfe305ab2018-05-17 10:12:34 -0700599
Martijn Coenen4517e572019-03-12 22:05:20 +0100600 mkdir /metadata/apex 0700 root system
601 mkdir /metadata/apex/sessions 0700 root system
Nikita Ioffea4620442020-06-22 17:47:23 +0100602 # On some devices we see a weird behaviour in which /metadata/apex doesn't
603 # have a correct label. To workaround this bug, explicitly call restorecon
604 # on /metadata/apex. For most of the boot sequences /metadata/apex will
605 # already have a correct selinux label, meaning that this call will be a
606 # no-op.
607 restorecon_recursive /metadata/apex
608
Mohammad Samiul Islamd192d542020-05-07 15:52:48 +0100609 mkdir /metadata/staged-install 0770 root system
Jeff Vander Stoep75d0b332021-11-17 08:55:35 +0100610 mkdir /metadata/sepolicy 0700 root root
Janis Danisevskis1ad8d212017-04-06 12:44:59 -0700611on late-fs
Joel Galensond48c4cf2017-06-13 10:15:05 -0700612 # Ensure that tracefs has the correct permissions.
613 # This does not work correctly if it is called in post-fs.
Alistair Delvaebb5b3b2020-01-29 09:10:47 -0800614 chmod 0755 /sys/kernel/tracing
Joel Galensond48c4cf2017-06-13 10:15:05 -0700615 chmod 0755 /sys/kernel/debug/tracing
616
Janis Danisevskis1ad8d212017-04-06 12:44:59 -0700617 # HALs required before storage encryption can get unlocked (FBE/FDE)
618 class_start early_hal
619
Martijn Coenen3b68bf22020-11-30 10:05:40 +0100620 # Load trusted keys from dm-verity protected partitions
621 exec -- /system/bin/fsverity_init --load-verified-keys
622
Alexander Potapenko53cd1e92021-09-29 13:30:02 +0000623# Only enable the bootreceiver tracing instance for kernels 5.10 and above.
624on late-fs && property:ro.kernel.version=4.9
625 setprop bootreceiver.enable 0
626on late-fs && property:ro.kernel.version=4.14
627 setprop bootreceiver.enable 0
628on late-fs && property:ro.kernel.version=4.19
629 setprop bootreceiver.enable 0
630on late-fs && property:ro.kernel.version=5.4
631 setprop bootreceiver.enable 0
632on late-fs
633 # Bootreceiver tracing instance is enabled by default.
634 setprop bootreceiver.enable ${bootreceiver.enable:-1}
635
636on property:ro.product.cpu.abilist64=* && property:bootreceiver.enable=1
Alexander Potapenko439608b2021-03-02 16:50:16 +0100637 # Set up a tracing instance for system_server to monitor error_report_end events.
638 # These are sent by kernel tools like KASAN and KFENCE when a memory corruption
Alexander Potapenkoec37ba82021-08-03 07:47:40 +0000639 # is detected. This is only needed for 64-bit systems.
Alexander Potapenko439608b2021-03-02 16:50:16 +0100640 mkdir /sys/kernel/tracing/instances/bootreceiver 0700 system system
641 restorecon_recursive /sys/kernel/tracing/instances/bootreceiver
642 write /sys/kernel/tracing/instances/bootreceiver/buffer_size_kb 1
643 write /sys/kernel/tracing/instances/bootreceiver/trace_options disable_on_free
644 write /sys/kernel/tracing/instances/bootreceiver/events/error_report/error_report_end/enable 1
645
Ken Sumrall752923c2010-12-03 16:33:31 -0800646on post-fs-data
Martijn Coenene94b3662021-03-09 10:57:00 +0100647
Martijn Coenenf0bc58a2019-04-23 16:26:01 +0200648 mark_post_data
649
Paul Lawrenceb920cb42018-10-04 08:37:17 -0700650 # Start checkpoint before we touch data
Paul Lawrenceb920cb42018-10-04 08:37:17 -0700651 exec - system system -- /system/bin/vdc checkpoint prepareCheckpoint
652
Colin Cross31712be2010-04-09 12:26:06 -0700653 # We chown/chmod /data again so because mount is run as root + defaults
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800654 chown system system /data
655 chmod 0771 /data
Stephen Smalley1eee4192012-01-13 08:54:34 -0500656 # We restorecon /data in case the userdata partition has been reset.
657 restorecon /data
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800658
Elliott Hughes2f74a5d2016-02-02 09:15:59 -0800659 # Make sure we have the device encryption key.
Paul Lawrence806d10b2015-04-28 22:07:10 +0000660 installkey /data
661
Yongqin Liua197ff12014-12-05 13:45:02 +0800662 # Start bootcharting as soon as possible after the data partition is
663 # mounted to collect more data.
Paul Crowley68258e82019-10-28 07:55:03 -0700664 mkdir /data/bootchart 0755 shell shell encryption=Require
Elliott Hughesa3641af2016-11-10 17:43:47 -0800665 bootchart start
Yongqin Liua197ff12014-12-05 13:45:02 +0800666
Paul Crowley7583da12021-04-08 17:04:43 +0000667 # Avoid predictable entropy pool. Carry over entropy from previous boot.
668 copy /data/system/entropy.dat /dev/urandom
669
Tom Cherry2c9c8eb2020-10-16 10:02:40 -0700670 mkdir /data/vendor 0771 root root encryption=Require
671 mkdir /data/vendor_ce 0771 root root encryption=None
672 mkdir /data/vendor_de 0771 root root encryption=None
673 mkdir /data/vendor/hardware 0771 root root
674
Josh Gao81c94cd2020-10-01 13:01:15 -0700675 # Start tombstoned early to be able to store tombstones.
Kevin Brodsky13d86ad2020-12-17 15:32:50 +0000676 mkdir /data/anr 0775 system system encryption=Require
Josh Gao81c94cd2020-10-01 13:01:15 -0700677 mkdir /data/tombstones 0771 system system encryption=Require
678 mkdir /data/vendor/tombstones 0771 root root
679 mkdir /data/vendor/tombstones/wifi 0771 wifi wifi
680 start tombstoned
681
Kevin Brodsky13d86ad2020-12-17 15:32:50 +0000682 # Make sure that apexd is started in the default namespace
683 enter_default_mount_ns
684
Paul Crowley7583da12021-04-08 17:04:43 +0000685 # set up keystore directory structure first so that we can end early boot
686 # and start apexd
687 mkdir /data/misc 01771 system misc encryption=Require
688 mkdir /data/misc/keystore 0700 keystore keystore
689 # work around b/183668221
690 restorecon /data/misc /data/misc/keystore
691
692 # Boot level 30
693 # odsign signing keys have MAX_BOOT_LEVEL=30
694 # This is currently the earliest boot level, but we start at 30
695 # to leave room for earlier levels.
696 setprop keystore.boot_level 30
697
698 # Now that /data is mounted and we have created /data/misc/keystore,
699 # we can tell keystore to stop allowing use of early-boot keys,
700 # and access its database for the first time to support creation and
701 # use of MAX_BOOT_LEVEL keys.
702 exec - system system -- /system/bin/vdc keymaster earlyBootEnded
703
Daniel Normanebaa3e52021-11-16 20:28:29 +0000704 # Multi-installed APEXes are selected using persist props.
705 # Load persist properties and override properties (if enabled) from /data,
706 # before starting apexd.
707 load_persist_props
708 start logd
709 start logd-reinit
710 # Some existing vendor rc files use 'on load_persist_props_action' to know
711 # when persist props are ready. These are difficult to change due to GRF,
712 # so continue triggering this action here even though props are already loaded
713 # by the 'load_persist_props' call above.
714 trigger load_persist_props_action
715
Jiyong Parkdcbaf9f2019-02-22 22:15:25 +0900716 # /data/apex is now available. Start apexd to scan and activate APEXes.
Eric Biggers915b8d72021-04-28 10:15:38 -0700717 #
718 # To handle userspace reboots as well as devices that use FDE, make sure
719 # that apexd is started cleanly here (set apexd.status="") and that it is
720 # restarted if it's already running.
Nikita Ioffeb8591b52020-04-21 20:50:53 +0100721 mkdir /data/apex 0755 root system encryption=None
722 mkdir /data/apex/active 0755 root system
Jiyong Parkdcbaf9f2019-02-22 22:15:25 +0900723 mkdir /data/apex/backup 0700 root system
Mohammad Samiul Islam60e30a52021-04-27 21:44:10 +0100724 mkdir /data/apex/decompressed 0755 root system encryption=Require
Jooyung Hanbaa7c132019-04-18 11:01:35 +0900725 mkdir /data/apex/hashtree 0700 root system
Jiyong Parkdcbaf9f2019-02-22 22:15:25 +0900726 mkdir /data/apex/sessions 0700 root system
Mohammad Samiul Islam64fe2c62020-12-09 21:05:28 +0000727 mkdir /data/app-staging 0751 system system encryption=DeleteIfNecessary
Kelvin Zhang1f455c82021-02-10 09:32:17 -0500728 mkdir /data/apex/ota_reserved 0700 root system encryption=Require
Eric Biggers915b8d72021-04-28 10:15:38 -0700729 setprop apexd.status ""
730 restart apexd
Martijn Coenen3848e1b2018-08-17 13:52:25 +0200731
Paul Crowley7583da12021-04-08 17:04:43 +0000732 # create rest of basic filesystem structure
Mark Salyzyn93394032017-07-14 10:37:57 -0700733 mkdir /data/misc/recovery 0770 system log
Siqi Linb9b76de2017-07-26 13:18:15 -0700734 copy /data/misc/recovery/ro.build.fingerprint /data/misc/recovery/ro.build.fingerprint.1
735 chmod 0440 /data/misc/recovery/ro.build.fingerprint.1
736 chown system log /data/misc/recovery/ro.build.fingerprint.1
737 write /data/misc/recovery/ro.build.fingerprint ${ro.build.fingerprint}
738 chmod 0440 /data/misc/recovery/ro.build.fingerprint
739 chown system log /data/misc/recovery/ro.build.fingerprint
Mark Salyzyn93394032017-07-14 10:37:57 -0700740 mkdir /data/misc/recovery/proc 0770 system log
741 copy /data/misc/recovery/proc/version /data/misc/recovery/proc/version.1
742 chmod 0440 /data/misc/recovery/proc/version.1
743 chown system log /data/misc/recovery/proc/version.1
744 copy /proc/version /data/misc/recovery/proc/version
745 chmod 0440 /data/misc/recovery/proc/version
746 chown system log /data/misc/recovery/proc/version
Ajay Panicker604208e2016-09-20 11:52:14 -0700747 mkdir /data/misc/bluedroid 02770 bluetooth bluetooth
Pavlin Radoslavov8175bb22015-06-19 19:12:46 -0700748 # Fix the access permissions and group ownership for 'bt_config.conf'
749 chmod 0660 /data/misc/bluedroid/bt_config.conf
Ajay Panicker604208e2016-09-20 11:52:14 -0700750 chown bluetooth bluetooth /data/misc/bluedroid/bt_config.conf
751 mkdir /data/misc/bluetooth 0770 bluetooth bluetooth
752 mkdir /data/misc/bluetooth/logs 0770 bluetooth bluetooth
Jack Yu6097da82020-07-08 17:08:16 +0800753 mkdir /data/misc/nfc 0770 nfc nfc
754 mkdir /data/misc/nfc/logs 0770 nfc nfc
David Zeuthene83f3862019-10-28 13:42:14 -0400755 mkdir /data/misc/credstore 0700 credstore credstore
Andres Morales6a49c2f2015-04-16 13:16:24 -0700756 mkdir /data/misc/gatekeeper 0700 system system
Brian Carlstrom04918932011-06-30 22:50:29 -0700757 mkdir /data/misc/keychain 0771 system system
Sreeram Ramachandranb46efdb2014-07-07 22:09:54 -0700758 mkdir /data/misc/net 0750 root shell
Robert Greenwalt2aa33a32013-07-16 09:46:17 -0700759 mkdir /data/misc/radio 0770 system radio
Robert Greenwaltd6d47802012-09-26 16:04:27 -0700760 mkdir /data/misc/sms 0770 system radio
fionaxu06b8e2e2017-11-21 12:31:57 -0800761 mkdir /data/misc/carrierid 0770 system radio
Niklas Lindgrenfd665382018-05-21 16:53:00 +0200762 mkdir /data/misc/apns 0770 system radio
Shuo Qianf0e65d82019-10-14 13:24:58 -0700763 mkdir /data/misc/emergencynumberdb 0770 system radio
Elliott Hughesf820e852012-10-19 18:10:05 -0700764 mkdir /data/misc/zoneinfo 0775 system system
Ricky Wai88d5dcb2017-10-27 16:35:35 +0100765 mkdir /data/misc/network_watchlist 0774 system system
Abodunrinwa Tokid6ab6452017-04-27 18:46:59 +0100766 mkdir /data/misc/textclassifier 0771 system system
Chia-chi Yeh9bb4d412011-07-08 20:03:03 -0700767 mkdir /data/misc/vpn 0770 system vpn
Torne (Richard Coles)234f6962014-05-22 18:40:21 +0100768 mkdir /data/misc/shared_relro 0771 shared_relro shared_relro
Oscar Montemayord0aa32c2010-01-06 13:18:12 -0800769 mkdir /data/misc/systemkeys 0700 system system
Mike Lockwood48d116e2009-07-08 18:42:08 -0400770 mkdir /data/misc/wifi 0770 wifi wifi
Stephen Smalley82e87ed2014-01-29 13:53:03 -0500771 mkdir /data/misc/wifi/sockets 0770 wifi wifi
Stephen Smalley82e87ed2014-01-29 13:53:03 -0500772 mkdir /data/misc/wifi/wpa_supplicant 0770 wifi wifi
Jaewan Kim373d9fa2014-03-10 17:13:07 +0900773 mkdir /data/misc/ethernet 0770 system system
Stephen Smalley82e87ed2014-01-29 13:53:03 -0500774 mkdir /data/misc/dhcp 0770 dhcp dhcp
Robin Lee3094f822014-04-25 15:21:35 +0100775 mkdir /data/misc/user 0771 root root
Stephen Smalley82e87ed2014-01-29 13:53:03 -0500776 # give system access to wpa_supplicant.conf for backup and restore
Amith Yamasanieefef322009-07-02 12:08:13 -0700777 chmod 0660 /data/misc/wifi/wpa_supplicant.conf
Paul Crowley68258e82019-10-28 07:55:03 -0700778 mkdir /data/local 0751 root root encryption=Require
Glenn Kastenb0f908a2013-02-22 14:54:45 -0800779 mkdir /data/misc/media 0700 media media
Glenn Kasten845a4ff2016-02-23 15:23:46 -0800780 mkdir /data/misc/audioserver 0700 audioserver audioserver
Keun Soo Yimbe54c542016-03-01 12:45:27 -0800781 mkdir /data/misc/cameraserver 0700 cameraserver cameraserver
Paul Crowleyf8a6fa52015-06-03 13:33:43 +0100782 mkdir /data/misc/vold 0700 root root
Yasuhiro Matsudaf93db4b2015-06-15 18:49:35 +0900783 mkdir /data/misc/boottrace 0771 system shell
David Zeuthen15914782015-10-07 14:00:55 -0400784 mkdir /data/misc/update_engine 0700 root root
Tianjie Xu74fa3ca2017-11-03 10:59:36 -0700785 mkdir /data/misc/update_engine_log 02750 root log
Calin Juravle9b3e5d52015-11-10 19:16:43 +0000786 mkdir /data/misc/trace 0700 root root
Vishnu Naird09ab7a2017-11-27 09:54:31 -0800787 # create location to store surface and window trace files
788 mkdir /data/misc/wmtrace 0700 system system
Hongming Jin87f55fe2021-02-09 11:54:46 -0800789 # create location to store accessibility trace files
790 mkdir /data/misc/a11ytrace 0700 system system
Calin Juravle807f23a2016-02-01 19:27:01 +0000791 # profile file layout
792 mkdir /data/misc/profiles 0771 system system
793 mkdir /data/misc/profiles/cur 0771 system system
Calin Juravle11197dd2021-05-14 11:28:04 -0700794 mkdir /data/misc/profiles/ref 0771 system system
David Sehr0eb24e12016-05-28 14:10:38 -0700795 mkdir /data/misc/profman 0770 system shell
Ryan Campbell0b364732017-02-21 17:27:02 -0800796 mkdir /data/misc/gcov 0770 root root
Paul Crowley26aabfd2019-08-16 12:39:17 -0700797 mkdir /data/misc/installd 0700 root root
Oli Lan90c523b2020-01-17 11:41:04 +0000798 mkdir /data/misc/apexdata 0711 root root
Oli Lan4370ff52019-12-02 18:24:12 +0000799 mkdir /data/misc/apexrollback 0700 root root
Andrei Onea3c505882020-12-23 15:26:11 +0000800 mkdir /data/misc/appcompat/ 0700 system system
Yifan Hong7d286882020-02-08 16:38:56 -0800801 mkdir /data/misc/snapshotctl_log 0755 root root
Jerry Changaedac7e2020-01-02 10:57:30 +0800802 # create location to store pre-reboot information
803 mkdir /data/misc/prereboot 0700 system system
Orion Hodson44bedf62021-04-09 15:04:15 +0100804 # directory used for on-device refresh metrics file.
805 mkdir /data/misc/odrefresh 0777 system system
Martijn Coenen00e51a42020-11-27 12:21:34 +0100806 # directory used for on-device signing key blob
807 mkdir /data/misc/odsign 0700 root root
Andrew Walbran1f885ae2021-07-14 13:39:13 +0000808 # Directory for VirtualizationService temporary image files.
Andrew Walbran2934ee02021-05-19 17:09:44 +0000809 mkdir /data/misc/virtualizationservice 0700 virtualizationservice virtualizationservice
Stephen Smalleydeb41e52013-10-01 09:21:47 -0400810
Paul Crowley68258e82019-10-28 07:55:03 -0700811 mkdir /data/preloads 0775 system system encryption=None
Anton Hanssonc38a6362018-10-24 15:29:16 +0100812
Nick Kralevichf3ef1272012-03-14 15:22:54 -0700813 # For security reasons, /data/local/tmp should always be empty.
814 # Do not place files or directories in /data/local/tmp
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800815 mkdir /data/local/tmp 0771 shell shell
Max Bires181d11c2018-01-18 14:23:51 -0800816 mkdir /data/local/traces 0777 shell shell
Paul Crowley68258e82019-10-28 07:55:03 -0700817 mkdir /data/data 0771 system system encryption=None
818 mkdir /data/app-private 0771 system system encryption=Require
819 mkdir /data/app-ephemeral 0771 system system encryption=Require
820 mkdir /data/app-asec 0700 root root encryption=Require
821 mkdir /data/app-lib 0771 system system encryption=Require
822 mkdir /data/app 0771 system system encryption=Require
823 mkdir /data/property 0700 root root encryption=Require
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800824
Seigo Nonaka18e43722020-11-17 20:06:49 -0800825 # create directory for updated font files.
826 mkdir /data/fonts/ 0771 root root encryption=Require
827 mkdir /data/fonts/files 0771 system system
828 mkdir /data/fonts/config 0770 system system
829
Colin Cross7201ef82020-08-31 16:15:28 -0700830 # Create directories to push tests to for each linker namespace.
831 # Create the subdirectories in case the first test is run as root
832 # so it doesn't end up owned by root.
Christopher Ferris2163bbb2021-09-08 12:36:24 -0700833 # Set directories to be executable by any process so that debuggerd,
834 # aka crash_dump, can read any executables/shared libraries.
835 mkdir /data/local/tests 0701 shell shell
836 mkdir /data/local/tests/product 0701 shell shell
837 mkdir /data/local/tests/system 0701 shell shell
838 mkdir /data/local/tests/unrestricted 0701 shell shell
839 mkdir /data/local/tests/vendor 0701 shell shell
Colin Cross7201ef82020-08-31 16:15:28 -0700840
Chia-chi Yehea744142011-07-08 16:52:18 -0700841 # create dalvik-cache, so as to enforce our permissions
Paul Crowley68258e82019-10-28 07:55:03 -0700842 mkdir /data/dalvik-cache 0771 root root encryption=Require
Andreas Gampe7dfcc922015-12-08 09:33:07 -0800843 # create the A/B OTA directory, so as to enforce our permissions
Paul Crowley68258e82019-10-28 07:55:03 -0700844 mkdir /data/ota 0771 root root encryption=Require
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800845
Tao Bao380d6b12016-05-25 16:41:08 -0700846 # create the OTA package directory. It will be accessed by GmsCore (cache
847 # group), update_engine and update_verifier.
Paul Crowley68258e82019-10-28 07:55:03 -0700848 mkdir /data/ota_package 0770 system cache encryption=Require
Tao Bao380d6b12016-05-25 16:41:08 -0700849
Mårten Kongstadb45280d2011-05-30 10:24:54 +0200850 # create resource-cache and double-check the perms
Paul Crowley68258e82019-10-28 07:55:03 -0700851 mkdir /data/resource-cache 0771 system system encryption=Require
Mårten Kongstadb45280d2011-05-30 10:24:54 +0200852 chown system system /data/resource-cache
853 chmod 0771 /data/resource-cache
854
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800855 # create the lost+found directories, so as to enforce our permissions
Paul Crowley68258e82019-10-28 07:55:03 -0700856 mkdir /data/lost+found 0770 root root encryption=None
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800857
James Dong09cdc0e2012-01-06 15:19:26 -0800858 # create directory for DRM plug-ins - give drm the read/write access to
859 # the following directory.
Paul Crowley68258e82019-10-28 07:55:03 -0700860 mkdir /data/drm 0770 drm drm encryption=Require
aimitakeshie572d592010-07-27 08:38:35 +0900861
Jeff Tinker08d64302013-04-23 19:54:17 -0700862 # create directory for MediaDrm plug-ins - give drm the read/write access to
863 # the following directory.
Paul Crowley68258e82019-10-28 07:55:03 -0700864 mkdir /data/mediadrm 0770 mediadrm mediadrm encryption=Require
Jeff Tinker08d64302013-04-23 19:54:17 -0700865
Tom Cherryc3193102017-11-21 10:40:25 -0800866 # NFC: create data/nfc for nv storage
Paul Crowley68258e82019-10-28 07:55:03 -0700867 mkdir /data/nfc 0770 nfc nfc encryption=Require
Tom Cherryc3193102017-11-21 10:40:25 -0800868 mkdir /data/nfc/param 0770 nfc nfc
869
Paul Lawrencec410b3b2015-03-26 15:49:42 +0000870 # Create all remaining /data root dirs so that they are made through init
871 # and get proper encryption policy installed
Paul Crowley68258e82019-10-28 07:55:03 -0700872 mkdir /data/backup 0700 system system encryption=Require
873 mkdir /data/ss 0700 system system encryption=Require
Jeff Sharkey11705862015-11-09 17:07:35 -0800874
Paul Crowley68258e82019-10-28 07:55:03 -0700875 mkdir /data/system 0775 system system encryption=Require
Artur Satayev441e6b92021-03-30 11:49:05 +0100876 mkdir /data/system/environ 0700 system system
877 # b/183861600 attempt to fix selinux label before running derive_classpath service
878 restorecon /data/system/environ
Jeff Vander Stoep148dea72018-04-16 16:04:38 -0700879 mkdir /data/system/dropbox 0700 system system
Nick Kralevich9c0437f2015-04-07 16:44:08 -0700880 mkdir /data/system/heapdump 0700 system system
Jeff Sharkeyc9b84a32016-04-14 21:09:34 -0600881 mkdir /data/system/users 0775 system system
Jeff Sharkey3b9c83a2016-02-03 14:44:44 -0700882
Paul Crowley68258e82019-10-28 07:55:03 -0700883 mkdir /data/system_de 0770 system system encryption=None
884 mkdir /data/system_ce 0770 system system encryption=None
Jeff Sharkey3b9c83a2016-02-03 14:44:44 -0700885
Paul Crowley68258e82019-10-28 07:55:03 -0700886 mkdir /data/misc_de 01771 system misc encryption=None
887 mkdir /data/misc_ce 01771 system misc encryption=None
Jeff Sharkey11705862015-11-09 17:07:35 -0800888
Paul Crowley68258e82019-10-28 07:55:03 -0700889 mkdir /data/user 0711 system system encryption=None
890 mkdir /data/user_de 0711 system system encryption=None
Ricky Wai3cca2702019-12-12 12:55:03 +0000891
892 # Unlink /data/user/0 if we previously symlink it to /data/data
893 rm /data/user/0
894
895 # Bind mount /data/user/0 to /data/data
896 mkdir /data/user/0 0700 system system encryption=None
897 mount none /data/data /data/user/0 bind rec
Paul Lawrencec410b3b2015-03-26 15:49:42 +0000898
Ricky Wai3cca2702019-12-12 12:55:03 +0000899 # A tmpfs directory, which will contain all apps CE DE data directory that
900 # bind mount from the original source.
Ricky Wai1a5ae502020-03-04 13:30:09 +0000901 mount tmpfs tmpfs /data_mirror nodev noexec nosuid mode=0700,uid=0,gid=1000
Ricky Wai3cca2702019-12-12 12:55:03 +0000902 restorecon /data_mirror
903 mkdir /data_mirror/data_ce 0700 root root
904 mkdir /data_mirror/data_de 0700 root root
905
906 # Create CE and DE data directory for default volume
907 mkdir /data_mirror/data_ce/null 0700 root root
908 mkdir /data_mirror/data_de/null 0700 root root
909
910 # Bind mount CE and DE data directory to mirror's default volume directory
911 mount none /data/user /data_mirror/data_ce/null bind rec
912 mount none /data/user_de /data_mirror/data_de/null bind rec
913
Ricky Waifdc09862019-12-13 17:32:18 +0000914 # Create mirror directory for jit profiles
915 mkdir /data_mirror/cur_profiles 0700 root root
916 mount none /data/misc/profiles/cur /data_mirror/cur_profiles bind rec
Ricky Wai420830f2021-06-08 12:15:14 +0100917 mkdir /data_mirror/ref_profiles 0700 root root
918 mount none /data/misc/profiles/ref /data_mirror/ref_profiles bind rec
Ricky Waifdc09862019-12-13 17:32:18 +0000919
Paul Crowley68258e82019-10-28 07:55:03 -0700920 mkdir /data/cache 0770 system cache encryption=Require
Yueyao (Nathan) Zhu60c6dac2016-06-21 12:04:54 -0700921 mkdir /data/cache/recovery 0770 system cache
922 mkdir /data/cache/backup_stage 0700 system system
923 mkdir /data/cache/backup 0700 system system
924
Paul Crowley68258e82019-10-28 07:55:03 -0700925 # Delete these if need be, per b/139193659
926 mkdir /data/rollback 0700 system system encryption=DeleteIfNecessary
927 mkdir /data/rollback-observer 0700 system system encryption=DeleteIfNecessary
JW Wang5fc74a42020-11-13 15:45:49 +0800928 mkdir /data/rollback-history 0700 system system encryption=DeleteIfNecessary
Paul Crowley8184d7c2019-08-09 14:13:41 -0700929
Songchun Fan28496242019-12-17 12:41:34 -0800930 # Create root dir for Incremental Service
Songchun Fan73d9e7d2019-12-19 16:04:11 -0800931 mkdir /data/incremental 0771 system system encryption=Require
Songchun Fan28496242019-12-17 12:41:34 -0800932
Jeffrey Huang8dccf3f2020-02-19 10:56:17 -0800933 # Create directories for statsd
Jeffrey Huang8dccf3f2020-02-19 10:56:17 -0800934 mkdir /data/misc/stats-active-metric/ 0770 statsd system
Jeffrey Huang58c88612020-03-05 08:53:11 -0800935 mkdir /data/misc/stats-data/ 0770 statsd system
936 mkdir /data/misc/stats-metadata/ 0770 statsd system
937 mkdir /data/misc/stats-service/ 0770 statsd system
Jeffrey Huang8dccf3f2020-02-19 10:56:17 -0800938 mkdir /data/misc/train-info/ 0770 statsd system
939
Jiyong Parkdcbaf9f2019-02-22 22:15:25 +0900940 # Wait for apexd to finish activating APEXes before starting more processes.
Oli Lan3cb185e2020-02-06 11:55:51 +0000941 wait_for_prop apexd.status activated
Oli Lan13e51e72019-11-19 18:08:45 +0000942 perform_apex_config
943
Daniel Rosenbergebfe3592019-12-20 13:17:19 -0800944 # Special-case /data/media/obb per b/64566063
945 mkdir /data/media 0770 media_rw media_rw encryption=None
946 exec - media_rw media_rw -- /system/bin/chattr +F /data/media
947 mkdir /data/media/obb 0770 media_rw media_rw encryption=Attempt
948
Josh Yangef76c812021-12-23 14:40:00 -0800949 # Create directories for boot animation.
950 mkdir /data/bootanim 0755 system system encryption=None
951
Anton Hansson3c5cc312019-12-05 15:38:37 +0000952 exec_start derive_sdk
Jiyong Parkdcbaf9f2019-02-22 22:15:25 +0900953
Paul Crowley59497452016-02-01 16:37:13 +0000954 init_user0
955
Martijn Coenenc7a26dc2021-01-18 11:14:22 +0100956 # Set SELinux security contexts on upgrade or policy update.
957 restorecon --recursive --skip-ce /data
958
Artur Satayev7df79972021-03-30 11:56:40 +0100959 # Define and export *CLASSPATH variables
960 # Must start before 'odsign', as odsign depends on *CLASSPATH variables
961 exec_start derive_classpath
962 load_exports /data/system/environ/classpath
Artur Satayev7df79972021-03-30 11:56:40 +0100963
Martijn Coenen00e51a42020-11-27 12:21:34 +0100964 # Start the on-device signing daemon, and wait for it to finish, to ensure
965 # ART artifacts are generated if needed.
satayev52cc8962021-03-19 11:08:49 +0000966 # Must start after 'derive_classpath' to have *CLASSPATH variables set.
Martijn Coenen648dec62021-03-17 08:44:55 +0100967 start odsign
968
969 # Before we can lock keys and proceed to the next boot stage, wait for
970 # odsign to be done with the key
971 wait_for_prop odsign.key.done 1
Martijn Coenen00e51a42020-11-27 12:21:34 +0100972
Martijn Coenenc7a26dc2021-01-18 11:14:22 +0100973 # Lock the fs-verity keyring, so no more keys can be added
974 exec -- /system/bin/fsverity_init --lock
975
Paul Crowley7583da12021-04-08 17:04:43 +0000976 # Bump the boot level to 1000000000; this prevents further on-device signing.
977 # This is a special value that shuts down the thread which listens for
978 # further updates.
979 setprop keystore.boot_level 1000000000
Martijn Coenene94b3662021-03-09 10:57:00 +0100980
Oli Lana466ca82020-01-23 19:52:42 +0000981 # Allow apexd to snapshot and restore device encrypted apex data in the case
982 # of a rollback. This should be done immediately after DE_user data keys
983 # are loaded. APEXes should not access this data until this has been
Oli Lan3cb185e2020-02-06 11:55:51 +0000984 # completed and apexd.status becomes "ready".
Oli Lana466ca82020-01-23 19:52:42 +0000985 exec_start apexd-snapshotde
986
Neil Fuller09bdb322019-06-06 15:18:36 +0100987 # Check any timezone data in /data is newer than the copy in the time zone data
988 # module, delete if not.
989 exec - system system -- /system/bin/tzdatacheck /apex/com.android.tzdata/etc/tz /data/misc/zoneinfo
Neil Fullerada7e492019-02-22 14:05:40 +0000990
Joel Fernandesae7f0522019-01-31 19:27:23 -0500991 # sys.memfd_use set to false by default, which keeps it disabled
992 # until it is confirmed that apps and vendor processes don't make
993 # IOCTLs on ashmem fds any more.
994 setprop sys.use_memfd false
995
Wei Wangec78cca2019-04-19 10:58:39 -0700996 # Set fscklog permission
997 chown root system /dev/fscklogs/log
998 chmod 0770 /dev/fscklogs/log
999
Zim8dacabe2020-02-10 20:24:40 +00001000 # Enable FUSE by default
1001 setprop persist.sys.fuse true
1002
Wei Wang53842e72017-04-20 14:37:55 -07001003# It is recommended to put unnecessary data/ initialization from post-fs-data
1004# to start-zygote in device's init.rc to unblock zygote start.
1005on zygote-start && property:ro.crypto.state=unencrypted
Martijn Coenen648dec62021-03-17 08:44:55 +01001006 wait_for_prop odsign.verification.done 1
Wei Wang53842e72017-04-20 14:37:55 -07001007 # A/B update verifier that marks a successful boot.
1008 exec_start update_verifier_nonencrypted
Keun young Park6423ccd2020-06-23 20:32:54 -07001009 start statsd
Wei Wang53842e72017-04-20 14:37:55 -07001010 start netd
1011 start zygote
1012 start zygote_secondary
1013
1014on zygote-start && property:ro.crypto.state=unsupported
Martijn Coenen648dec62021-03-17 08:44:55 +01001015 wait_for_prop odsign.verification.done 1
Wei Wang53842e72017-04-20 14:37:55 -07001016 # A/B update verifier that marks a successful boot.
1017 exec_start update_verifier_nonencrypted
Keun young Park6423ccd2020-06-23 20:32:54 -07001018 start statsd
Wei Wang53842e72017-04-20 14:37:55 -07001019 start netd
1020 start zygote
1021 start zygote_secondary
1022
Wei Wangbae9ba32017-03-09 12:35:02 -08001023on zygote-start && property:ro.crypto.state=encrypted && property:ro.crypto.type=file
Martijn Coenen648dec62021-03-17 08:44:55 +01001024 wait_for_prop odsign.verification.done 1
Wei Wang53842e72017-04-20 14:37:55 -07001025 # A/B update verifier that marks a successful boot.
1026 exec_start update_verifier_nonencrypted
Keun young Park6423ccd2020-06-23 20:32:54 -07001027 start statsd
Wei Wang53842e72017-04-20 14:37:55 -07001028 start netd
1029 start zygote
1030 start zygote_secondary
Wei Wangbae9ba32017-03-09 12:35:02 -08001031
Jaegeuk Kim58ff5072019-04-02 07:01:43 -07001032on boot && property:ro.config.low_ram=true
1033 # Tweak background writeout
1034 write /proc/sys/vm/dirty_expire_centisecs 200
1035 write /proc/sys/vm/dirty_background_ratio 5
1036
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -08001037on boot
Riley Andrews6dfdc7c2014-06-18 20:35:40 -07001038 # basic network init
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -08001039 ifup lo
1040 hostname localhost
1041 domainname localdomain
1042
Benedict Wong00308f82018-03-12 19:00:50 -07001043 # IPsec SA default expiration length
1044 write /proc/sys/net/core/xfrm_acq_expires 3600
1045
Riley Andrews6dfdc7c2014-06-18 20:35:40 -07001046 # Memory management. Basic kernel parameters, and allow the high
1047 # level system server to be able to adjust the kernel OOM driver
1048 # parameters to match how it is managing things.
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -08001049 write /proc/sys/vm/overcommit_memory 1
The Android Open Source Projecte037fd72009-03-13 13:04:37 -07001050 write /proc/sys/vm/min_free_order_shift 4
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -08001051
Srinivas Paladugu3a632832019-01-09 11:28:59 -08001052 # System server manages zram writeback
1053 chown root system /sys/block/zram0/idle
1054 chmod 0664 /sys/block/zram0/idle
1055 chown root system /sys/block/zram0/writeback
1056 chmod 0664 /sys/block/zram0/writeback
1057
Jaegeuk Kim43dca3c2020-07-20 17:34:47 -07001058 # to access F2FS sysfs on dm-<num> directly
1059 mkdir /dev/sys/fs/by-name 0755 system system
Guo Weichaobcefbb12021-05-26 11:12:11 +08001060 symlink /sys/fs/f2fs/${dev.mnt.dev.data} /dev/sys/fs/by-name/userdata
Jaegeuk Kim43dca3c2020-07-20 17:34:47 -07001061
Jaegeuk Kim120f6b22022-03-04 15:06:02 -08001062 # dev.mnt.dev.data=dm-N, dev.mnt.blk.data=sdaN/mmcblk0pN, dev.mnt.rootdisk.data=sda/mmcblk0, or
1063 # dev.mnt.dev.data=sdaN/mmcblk0pN, dev.mnt.blk.data=sdaN/mmcblk0pN, dev.mnt.rootdisk.data=sda/mmcblk0
Jaegeuk Kim43dca3c2020-07-20 17:34:47 -07001064 mkdir /dev/sys/block/by-name 0755 system system
Juhyung Park852111e2022-02-15 18:05:06 +09001065 symlink /sys/class/block/${dev.mnt.dev.data} /dev/sys/block/by-name/userdata
Jaegeuk Kim120f6b22022-03-04 15:06:02 -08001066 symlink /sys/class/block/${dev.mnt.rootdisk.data} /dev/sys/block/by-name/rootdisk
Jaegeuk Kim43dca3c2020-07-20 17:34:47 -07001067
Jaegeuk Kim58ff5072019-04-02 07:01:43 -07001068 # F2FS tuning. Set cp_interval larger than dirty_expire_centisecs, 30 secs,
Jaegeuk Kimf65df962019-03-29 09:16:51 -07001069 # to avoid power consumption when system becomes mostly idle. Be careful
1070 # to make it too large, since it may bring userdata loss, if they
1071 # are not aware of using fsync()/sync() to prepare sudden power-cut.
Jaegeuk Kim43dca3c2020-07-20 17:34:47 -07001072 write /dev/sys/fs/by-name/userdata/cp_interval 200
1073 write /dev/sys/fs/by-name/userdata/gc_urgent_sleep_time 50
1074 write /dev/sys/fs/by-name/userdata/iostat_enable 1
Jaegeuk Kimf65df962019-03-29 09:16:51 -07001075
Jaegeuk Kimfe9e8a32019-11-27 15:42:10 -08001076 # limit discard size to 128MB in order to avoid long IO latency
1077 # for filesystem tuning first (dm or sda)
Jaegeuk Kim120f6b22022-03-04 15:06:02 -08001078 # this requires enabling selinux entry for sda/mmcblk0 in vendor side
Jaegeuk Kim43dca3c2020-07-20 17:34:47 -07001079 write /dev/sys/block/by-name/userdata/queue/discard_max_bytes 134217728
Jaegeuk Kim120f6b22022-03-04 15:06:02 -08001080 write /dev/sys/block/by-name/rootdisk/queue/discard_max_bytes 134217728
Jaegeuk Kimfe9e8a32019-11-27 15:42:10 -08001081
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -08001082 # Permissions for System Server and daemons.
Arve Hjønnevåg70a163f2012-05-02 17:57:50 -07001083 chown system system /sys/power/autosleep
Todd Poynor0653b972012-04-11 14:48:51 -07001084
1085 chown system system /sys/devices/system/cpu/cpufreq/interactive/timer_rate
1086 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/timer_rate
Todd Poynor2b5b3bb2012-12-20 18:52:03 -08001087 chown system system /sys/devices/system/cpu/cpufreq/interactive/timer_slack
1088 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/timer_slack
Todd Poynor0653b972012-04-11 14:48:51 -07001089 chown system system /sys/devices/system/cpu/cpufreq/interactive/min_sample_time
1090 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/min_sample_time
1091 chown system system /sys/devices/system/cpu/cpufreq/interactive/hispeed_freq
1092 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/hispeed_freq
Todd Poynor2b5b3bb2012-12-20 18:52:03 -08001093 chown system system /sys/devices/system/cpu/cpufreq/interactive/target_loads
1094 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/target_loads
Todd Poynor0653b972012-04-11 14:48:51 -07001095 chown system system /sys/devices/system/cpu/cpufreq/interactive/go_hispeed_load
1096 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/go_hispeed_load
Todd Poynorf35c2032012-04-19 13:17:24 -07001097 chown system system /sys/devices/system/cpu/cpufreq/interactive/above_hispeed_delay
1098 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/above_hispeed_delay
Todd Poynor8d3ea1d2012-04-24 15:37:13 -07001099 chown system system /sys/devices/system/cpu/cpufreq/interactive/boost
1100 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/boost
Todd Poynor4ff10e62012-05-03 15:20:48 -07001101 chown system system /sys/devices/system/cpu/cpufreq/interactive/boostpulse
Todd Poynor33045a62012-04-27 20:21:18 -07001102 chown system system /sys/devices/system/cpu/cpufreq/interactive/input_boost
1103 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/input_boost
Todd Poynor4f247d72012-12-19 17:43:06 -08001104 chown system system /sys/devices/system/cpu/cpufreq/interactive/boostpulse_duration
1105 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/boostpulse_duration
Todd Poynor6b5de1c2013-03-25 13:17:13 -07001106 chown system system /sys/devices/system/cpu/cpufreq/interactive/io_is_busy
1107 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/io_is_busy
Todd Poynor0653b972012-04-11 14:48:51 -07001108
1109 # Assume SMP uses shared cpufreq policy for all CPUs
1110 chown system system /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
1111 chmod 0660 /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
1112
David Lin27b2c1e2017-03-08 17:36:18 -08001113 chown system system /sys/class/leds/vibrator/trigger
1114 chown system system /sys/class/leds/vibrator/activate
1115 chown system system /sys/class/leds/vibrator/brightness
1116 chown system system /sys/class/leds/vibrator/duration
1117 chown system system /sys/class/leds/vibrator/state
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -08001118 chown system system /sys/class/timed_output/vibrator/enable
1119 chown system system /sys/class/leds/keyboard-backlight/brightness
1120 chown system system /sys/class/leds/lcd-backlight/brightness
1121 chown system system /sys/class/leds/button-backlight/brightness
The Android Open Source Projectf614d642009-03-18 17:39:49 -07001122 chown system system /sys/class/leds/jogball-backlight/brightness
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -08001123 chown system system /sys/class/leds/red/brightness
1124 chown system system /sys/class/leds/green/brightness
1125 chown system system /sys/class/leds/blue/brightness
1126 chown system system /sys/class/leds/red/device/grpfreq
1127 chown system system /sys/class/leds/red/device/grppwm
1128 chown system system /sys/class/leds/red/device/blink
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -08001129 chown system system /sys/module/sco/parameters/disable_esco
1130 chown system system /sys/kernel/ipv4/tcp_wmem_min
1131 chown system system /sys/kernel/ipv4/tcp_wmem_def
1132 chown system system /sys/kernel/ipv4/tcp_wmem_max
1133 chown system system /sys/kernel/ipv4/tcp_rmem_min
1134 chown system system /sys/kernel/ipv4/tcp_rmem_def
1135 chown system system /sys/kernel/ipv4/tcp_rmem_max
1136 chown root radio /proc/cmdline
1137
Riley Andrews6dfdc7c2014-06-18 20:35:40 -07001138 # Define default initial receive window size in segments.
paulhuf8cdebf2021-03-17 13:59:02 +08001139 setprop net.tcp_def_init_rwnd 60
JP Abgrall7c862c82014-02-21 12:05:01 -08001140
Bowgo Tsai5998c742021-10-21 21:24:16 +08001141 # Update dm-verity state and set partition.*.verified properties.
1142 verity_update_state
1143
Steven Morelandd6275022017-03-24 16:23:07 +00001144 # Start standard binderized HAL daemons
1145 class_start hal
1146
Ken Sumrall752923c2010-12-03 16:33:31 -08001147 class_start core
Ken Sumrall752923c2010-12-03 16:33:31 -08001148
1149on nonencrypted
Paul Lawrence13d5bb42014-01-30 10:43:52 -08001150 class_start main
Ken Sumrall752923c2010-12-03 16:33:31 -08001151 class_start late_start
1152
Riley Andrews1bbef882014-06-26 13:55:03 -07001153on property:sys.init_log_level=*
1154 loglevel ${sys.init_log_level}
1155
Dima Zavinca47cef2011-08-24 15:28:23 -07001156on charger
1157 class_start charger
1158
Elliott Hughesa3641af2016-11-10 17:43:47 -08001159on property:sys.boot_completed=1
1160 bootchart stop
Paul Crowley570d20d2019-09-11 15:02:44 -07001161 # Setup per_boot directory so other .rc could start to use it on boot_completed
1162 exec - system system -- /bin/rm -rf /data/per_boot
Paul Crowley68258e82019-10-28 07:55:03 -07001163 mkdir /data/per_boot 0700 system system encryption=Require key=per_boot_ref
Elliott Hughesa3641af2016-11-10 17:43:47 -08001164
JP Abgrall7c862c82014-02-21 12:05:01 -08001165# system server cannot write to /proc/sys files,
1166# and chown/chmod does not work for /proc/sys/ entries.
1167# So proxy writes through init.
Colin Cross57fdb5c2013-07-25 10:34:30 -07001168on property:sys.sysctl.extra_free_kbytes=*
Suren Baghdasaryan92cb2e82021-07-21 15:16:20 -07001169 exec -- /system/bin/extra_free_kbytes.sh ${sys.sysctl.extra_free_kbytes}
Riley Andrews6dfdc7c2014-06-18 20:35:40 -07001170
Michael Rosenfelde853d372021-02-10 18:38:05 -08001171# Allow users to drop caches
1172on property:perf.drop_caches=3
1173 write /proc/sys/vm/drop_caches 3
1174 setprop perf.drop_caches 0
1175
JP Abgrall7c862c82014-02-21 12:05:01 -08001176# "tcp_default_init_rwnd" Is too long!
Chiachang Wang7396fed2020-10-15 21:09:25 +08001177on property:net.tcp_def_init_rwnd=*
1178 write /proc/sys/net/ipv4/tcp_default_init_rwnd ${net.tcp_def_init_rwnd}
JP Abgrall7c862c82014-02-21 12:05:01 -08001179
Ryan Savitskif0f7e702020-01-14 22:02:53 +00001180# perf_event_open syscall security:
1181# Newer kernels have the ability to control the use of the syscall via SELinux
1182# hooks. init tests for this, and sets sys_init.perf_lsm_hooks to 1 if the
1183# kernel has the hooks. In this case, the system-wide perf_event_paranoid
1184# sysctl is set to -1 (unrestricted use), and the SELinux policy is used for
1185# controlling access. On older kernels, the paranoid value is the only means of
1186# controlling access. It is normally 3 (allow only root), but the shell user
1187# can lower it to 1 (allowing thread-scoped pofiling) via security.perf_harden.
1188on property:sys.init.perf_lsm_hooks=1
1189 write /proc/sys/kernel/perf_event_paranoid -1
1190on property:security.perf_harden=0 && property:sys.init.perf_lsm_hooks=""
Daniel Micay2b22a662015-09-04 16:23:01 -04001191 write /proc/sys/kernel/perf_event_paranoid 1
Ryan Savitskif0f7e702020-01-14 22:02:53 +00001192on property:security.perf_harden=1 && property:sys.init.perf_lsm_hooks=""
1193 write /proc/sys/kernel/perf_event_paranoid 3
1194
1195# Additionally, simpleperf profiler uses debug.* and security.perf_harden
1196# sysprops to be able to indirectly set these sysctls.
1197on property:security.perf_harden=0
Yabin Cui4f0da7c2018-06-29 14:52:47 -07001198 write /proc/sys/kernel/perf_event_max_sample_rate ${debug.perf_event_max_sample_rate:-100000}
1199 write /proc/sys/kernel/perf_cpu_time_max_percent ${debug.perf_cpu_time_max_percent:-25}
1200 write /proc/sys/kernel/perf_event_mlock_kb ${debug.perf_event_mlock_kb:-516}
Ryan Savitskif0f7e702020-01-14 22:02:53 +00001201# Default values.
Daniel Micay2b22a662015-09-04 16:23:01 -04001202on property:security.perf_harden=1
Ryan Savitskif0f7e702020-01-14 22:02:53 +00001203 write /proc/sys/kernel/perf_event_max_sample_rate 100000
1204 write /proc/sys/kernel/perf_cpu_time_max_percent 25
1205 write /proc/sys/kernel/perf_event_mlock_kb 516
1206
Primiano Tucci253289f2020-10-09 13:59:41 +01001207# This property can be set only on userdebug/eng. See neverallow rule in
1208# /system/sepolicy/private/property.te .
1209on property:security.lower_kptr_restrict=1
1210 write /proc/sys/kernel/kptr_restrict 0
1211
1212on property:security.lower_kptr_restrict=0
1213 write /proc/sys/kernel/kptr_restrict 2
1214
Colin Cross57fdb5c2013-07-25 10:34:30 -07001215
Wei Wangeeab4912017-06-27 22:08:45 -07001216# on shutdown
1217# In device's init.rc, this trigger can be used to do device-specific actions
1218# before shutdown. e.g disable watchdog and mask error handling
1219
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -08001220## Daemon processes to be run by init.
1221##
Tom Cherry31438482018-07-20 14:57:00 -07001222service ueventd /system/bin/ueventd
Ken Sumrall752923c2010-12-03 16:33:31 -08001223 class core
Colin Crossf83d0b92010-04-21 12:04:20 -07001224 critical
Stephen Smalley1eee4192012-01-13 08:54:34 -05001225 seclabel u:r:ueventd:s0
Keun-young Parkcccb34f2017-07-05 11:38:44 -07001226 shutdown critical
Colin Crossf83d0b92010-04-21 12:04:20 -07001227
Brian Swetlandb4d65392010-10-27 15:40:23 -07001228service console /system/bin/sh
Ken Sumrall752923c2010-12-03 16:33:31 -08001229 class core
Brian Swetlandb4d65392010-10-27 15:40:23 -07001230 console
1231 disabled
1232 user shell
Nick Kralevichc39ba5a2015-11-07 16:52:17 -08001233 group shell log readproc
Stephen Smalley610653f2013-12-23 14:11:02 -05001234 seclabel u:r:shell:s0
Dmitry Shmidtd0fb2512017-10-11 11:18:51 -07001235 setenv HOSTNAME console
Brian Swetlandb4d65392010-10-27 15:40:23 -07001236
Mike Lockwoodd49b4ef2010-11-19 09:12:27 -05001237on property:ro.debuggable=1
Calin Juravle9b3e5d52015-11-10 19:16:43 +00001238 # Give writes to anyone for the trace folder on debug builds.
1239 # The folder is used to store method traces.
1240 chmod 0773 /data/misc/trace
Vishnu Naird09ab7a2017-11-27 09:54:31 -08001241 # Give reads to anyone for the window trace folder on debug builds.
1242 chmod 0775 /data/misc/wmtrace
Hongming Jin87f55fe2021-02-09 11:54:46 -08001243 # Give reads to anyone for the accessibility trace folder on debug builds.
1244 chmod 0775 /data/misc/a11ytrace
Tom Cherry71c3ef12019-08-27 14:57:32 -07001245
1246on init && property:ro.debuggable=1
Brian Swetlandb4d65392010-10-27 15:40:23 -07001247 start console
Nikita Ioffeba6968e2019-10-07 16:26:33 +01001248
Nikita Ioffeac692142019-11-01 20:56:33 +00001249on userspace-reboot-requested
Nikita Ioffeba6968e2019-10-07 16:26:33 +01001250 # TODO(b/135984674): reset all necessary properties here.
Nikita Ioffe018ddd72019-12-20 16:34:48 +00001251 setprop sys.boot_completed ""
Nikita Ioffec2bc1a32020-02-07 17:42:27 +00001252 setprop dev.bootcomplete ""
Nikita Ioffe018ddd72019-12-20 16:34:48 +00001253 setprop sys.init.updatable_crashing ""
1254 setprop sys.init.updatable_crashing_process_name ""
Nikita Ioffe018ddd72019-12-20 16:34:48 +00001255 setprop sys.user.0.ce_available ""
Nikita Ioffe1131a212019-12-30 16:05:11 +00001256 setprop sys.shutdown.requested ""
Nikita Ioffe764c1ac2020-01-27 17:14:46 +00001257 setprop service.bootanim.exit ""
Nicolas Geoffraye106f0a2020-12-15 18:34:47 +00001258 setprop service.bootanim.progress ""
Nikita Ioffeba6968e2019-10-07 16:26:33 +01001259
Nikita Ioffe12a36072019-10-23 20:11:32 +01001260on userspace-reboot-fs-remount
1261 # Make sure that vold is running.
1262 # This is mostly a precaution measure in case vold for some reason wasn't running when
1263 # userspace reboot was initiated.
1264 start vold
1265 exec - system system -- /system/bin/vdc checkpoint resetCheckpoint
1266 exec - system system -- /system/bin/vdc checkpoint markBootAttempt
Nikita Ioffebf66f432020-04-07 00:26:15 +01001267 # Unmount /data_mirror mounts in the reverse order of corresponding mounts.
1268 umount /data_mirror/data_ce/null/0
1269 umount /data_mirror/data_ce/null
1270 umount /data_mirror/data_de/null
1271 umount /data_mirror/cur_profiles
Ricky Wai420830f2021-06-08 12:15:14 +01001272 umount /data_mirror/ref_profiles
Nikita Ioffebf66f432020-04-07 00:26:15 +01001273 umount /data_mirror
Nikita Ioffe12a36072019-10-23 20:11:32 +01001274 remount_userdata
Nikita Ioffe764c1ac2020-01-27 17:14:46 +00001275 start bootanim
Nikita Ioffe12a36072019-10-23 20:11:32 +01001276
Nikita Ioffe3f4b0d62019-10-09 15:23:02 +01001277on userspace-reboot-resume
Nikita Ioffe12a36072019-10-23 20:11:32 +01001278 trigger userspace-reboot-fs-remount
Nikita Ioffeba6968e2019-10-07 16:26:33 +01001279 trigger post-fs-data
1280 trigger zygote-start
1281 trigger early-boot
1282 trigger boot
Nikita Ioffec0df1872019-11-13 21:47:06 +00001283
1284on property:sys.boot_completed=1 && property:sys.init.userspace_reboot.in_progress=1
Nikita Ioffe85ff4ab2020-02-06 23:33:42 +00001285 setprop sys.init.userspace_reboot.in_progress ""