blob: a07790a35e534857daa058a3006403dc1be343b3 [file] [log] [blame]
Nick Kralevichf3ef1272012-03-14 15:22:54 -07001# Copyright (C) 2012 The Android Open Source Project
2#
3# IMPORTANT: Do not create world writable files or directories.
4# This is a common source of Android security bugs.
5#
6
Ying Wang5748ee92013-07-23 18:03:37 -07007import /init.environ.rc
Mike Lockwood4f5d5172012-04-04 11:26:59 -07008import /init.usb.rc
Mike Lockwood35ea5e42012-08-28 10:25:13 -07009import /init.${ro.hardware}.rc
Narayan Kamath4456a552014-03-31 11:08:02 +010010import /init.${ro.zygote}.rc
Todd Poynorf1c50bf2012-09-20 20:10:53 -070011import /init.trace.rc
Dima Zavin7634bf82011-12-16 14:23:22 -080012
Colin Crossf83d0b92010-04-21 12:04:20 -070013on early-init
Dima Zavin4a253902011-11-04 12:45:52 -070014 # Set init and its forked children's oom_adj.
15 write /proc/1/oom_adj -16
16
Stephen Smalley5e1461d2013-12-23 16:26:46 -050017 # Apply strict SELinux checking of PROT_EXEC on mmap/mprotect calls.
18 write /sys/fs/selinux/checkreqprot 0
19
Stephen Smalley1eee4192012-01-13 08:54:34 -050020 # Set the security context for the init process.
21 # This should occur before anything else (e.g. ueventd) is started.
22 setcon u:r:init:s0
23
Stephen Smalleydeb41e52013-10-01 09:21:47 -040024 # Set the security context of /adb_keys if present.
25 restorecon /adb_keys
26
Colin Crossf83d0b92010-04-21 12:04:20 -070027 start ueventd
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080028
Mike Lockwooda2dffa92010-06-15 20:57:59 -070029# create mountpoints
30 mkdir /mnt 0775 root system
31
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080032on init
33
34sysclktz 0
35
36loglevel 3
37
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080038# Backward compatibility
39 symlink /system/etc /etc
Brian Swetlandbb6f68c2009-09-18 15:31:23 -070040 symlink /sys/kernel/debug /d
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080041
Brian Swetland02863b92010-09-19 03:36:39 -070042# Right now vendor lives on the same filesystem as system,
43# but someday that may change.
44 symlink /system/vendor /vendor
San Mehat6ea3cc62010-02-19 18:25:22 -080045
Mike Chan89f235c2010-03-01 11:36:10 -080046# Create cgroup mount point for cpu accounting
47 mkdir /acct
48 mount cgroup none /acct cpuacct
49 mkdir /acct/uid
50
Rom Lemarchand435a52e2013-07-10 13:00:42 -070051# Create cgroup mount point for memory
Rom Lemarchand67b00d82013-09-10 17:39:30 -070052 mount tmpfs none /sys/fs/cgroup mode=0750,uid=0,gid=1000
53 mkdir /sys/fs/cgroup/memory 0750 root system
Rom Lemarchand435a52e2013-07-10 13:00:42 -070054 mount cgroup none /sys/fs/cgroup/memory memory
55 write /sys/fs/cgroup/memory/memory.move_charge_at_immigrate 1
56 chown root system /sys/fs/cgroup/memory/tasks
57 chmod 0660 /sys/fs/cgroup/memory/tasks
Rom Lemarchand67b00d82013-09-10 17:39:30 -070058 mkdir /sys/fs/cgroup/memory/sw 0750 root system
Rom Lemarchand435a52e2013-07-10 13:00:42 -070059 write /sys/fs/cgroup/memory/sw/memory.swappiness 100
60 write /sys/fs/cgroup/memory/sw/memory.move_charge_at_immigrate 1
61 chown root system /sys/fs/cgroup/memory/sw/tasks
62 chmod 0660 /sys/fs/cgroup/memory/sw/tasks
63
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080064 mkdir /system
65 mkdir /data 0771 system system
66 mkdir /cache 0770 system cache
Dmitry Shmidt720f08f2009-06-09 14:38:56 -070067 mkdir /config 0500 root root
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080068
Jeff Sharkeybfcd8102012-08-22 13:57:25 -070069 # See storage config details at http://source.android.com/tech/storage/
Jeff Sharkey5dd0f862012-08-17 16:01:16 -070070 mkdir /mnt/shell 0700 shell shell
Jeff Sharkeye93a0512013-10-08 10:14:24 -070071 mkdir /mnt/media_rw 0700 media_rw media_rw
Jeff Sharkey44d63422013-09-12 09:44:48 -070072 mkdir /storage 0751 root sdcard_r
Jeff Sharkey5dd0f862012-08-17 16:01:16 -070073
San Mehat6ea3cc62010-02-19 18:25:22 -080074 # Directory for putting things only root should see.
75 mkdir /mnt/secure 0700 root root
76
77 # Directory for staging bindmounts
78 mkdir /mnt/secure/staging 0700 root root
79
80 # Directory-target for where the secure container
81 # imagefile directory will be bind-mounted
82 mkdir /mnt/secure/asec 0700 root root
83
84 # Secure container public mount points.
85 mkdir /mnt/asec 0700 root system
86 mount tmpfs tmpfs /mnt/asec mode=0755,gid=1000
San Mehat900570e2010-01-06 10:38:49 -080087
Kenny Rootc7858a32010-07-15 12:14:44 -070088 # Filesystem image public mount points.
89 mkdir /mnt/obb 0700 root system
90 mount tmpfs tmpfs /mnt/obb mode=0755,gid=1000
91
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080092 write /proc/sys/kernel/panic_on_oops 1
93 write /proc/sys/kernel/hung_task_timeout_secs 0
94 write /proc/cpu/alignment 4
95 write /proc/sys/kernel/sched_latency_ns 10000000
96 write /proc/sys/kernel/sched_wakeup_granularity_ns 2000000
San Mehat4322f2d2009-06-29 08:47:43 -070097 write /proc/sys/kernel/sched_compat_yield 1
San Mehat7baff712009-09-16 13:32:23 -070098 write /proc/sys/kernel/sched_child_runs_first 0
Nick Kralevichd707fb32011-10-06 11:47:11 -070099 write /proc/sys/kernel/randomize_va_space 2
Nick Kralevich2e7c8332011-11-02 08:51:37 -0700100 write /proc/sys/kernel/kptr_restrict 2
Nick Kralevichf9557fb2011-11-08 14:38:53 -0800101 write /proc/sys/kernel/dmesg_restrict 1
Nick Kralevich27cca212011-12-05 14:48:08 -0800102 write /proc/sys/vm/mmap_min_addr 32768
Nick Kralevichbe341cc2013-02-21 18:36:43 -0800103 write /proc/sys/net/ipv4/ping_group_range "0 2147483647"
Mark Salyzyn581edc12013-11-20 13:38:52 -0800104 write /proc/sys/net/unix/max_dgram_qlen 300
Glenn Kastenb91bd9f2012-04-19 16:18:37 -0700105 write /proc/sys/kernel/sched_rt_runtime_us 950000
106 write /proc/sys/kernel/sched_rt_period_us 1000000
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800107
San Mehat529520e2009-10-06 11:22:55 -0700108# Create cgroup mount points for process groups
109 mkdir /dev/cpuctl
San Mehatb91bf4b2010-02-27 08:20:11 -0800110 mount cgroup none /dev/cpuctl cpu
San Mehat92175e02010-01-17 12:21:42 -0800111 chown system system /dev/cpuctl
San Mehat529520e2009-10-06 11:22:55 -0700112 chown system system /dev/cpuctl/tasks
Glenn Kastenb91bd9f2012-04-19 16:18:37 -0700113 chmod 0660 /dev/cpuctl/tasks
San Mehat529520e2009-10-06 11:22:55 -0700114 write /dev/cpuctl/cpu.shares 1024
Glenn Kastenb91bd9f2012-04-19 16:18:37 -0700115 write /dev/cpuctl/cpu.rt_runtime_us 950000
116 write /dev/cpuctl/cpu.rt_period_us 1000000
San Mehat529520e2009-10-06 11:22:55 -0700117
Dima Zavindf44b882012-06-04 10:45:15 -0700118 mkdir /dev/cpuctl/apps
119 chown system system /dev/cpuctl/apps/tasks
120 chmod 0666 /dev/cpuctl/apps/tasks
121 write /dev/cpuctl/apps/cpu.shares 1024
Dima Zavin5f2d00b2012-06-04 13:15:01 -0700122 write /dev/cpuctl/apps/cpu.rt_runtime_us 800000
Dima Zavindf44b882012-06-04 10:45:15 -0700123 write /dev/cpuctl/apps/cpu.rt_period_us 1000000
San Mehat529520e2009-10-06 11:22:55 -0700124
Dima Zavindf44b882012-06-04 10:45:15 -0700125 mkdir /dev/cpuctl/apps/bg_non_interactive
126 chown system system /dev/cpuctl/apps/bg_non_interactive/tasks
127 chmod 0666 /dev/cpuctl/apps/bg_non_interactive/tasks
San Mehat529520e2009-10-06 11:22:55 -0700128 # 5.0 %
Dima Zavindf44b882012-06-04 10:45:15 -0700129 write /dev/cpuctl/apps/bg_non_interactive/cpu.shares 52
Dima Zavin5f2d00b2012-06-04 13:15:01 -0700130 write /dev/cpuctl/apps/bg_non_interactive/cpu.rt_runtime_us 700000
Dima Zavindf44b882012-06-04 10:45:15 -0700131 write /dev/cpuctl/apps/bg_non_interactive/cpu.rt_period_us 1000000
Glenn Kastenb91bd9f2012-04-19 16:18:37 -0700132
JP Abgrall3e54aab2013-01-04 14:34:58 -0800133# qtaguid will limit access to specific data based on group memberships.
134# net_bw_acct grants impersonation of socket owners.
135# net_bw_stats grants access to other apps' detailed tagged-socket stats.
136 chown root net_bw_acct /proc/net/xt_qtaguid/ctrl
137 chown root net_bw_stats /proc/net/xt_qtaguid/stats
138
JP Abgrall8e3ff702011-09-11 16:12:27 -0700139# Allow everybody to read the xt_qtaguid resource tracking misc dev.
140# This is needed by any process that uses socket tagging.
141 chmod 0644 /dev/xt_qtaguid
142
Ken Sumrall4eaf9052013-09-18 17:49:21 -0700143# Create location for fs_mgr to store abbreviated output from filesystem
144# checker programs.
145 mkdir /dev/fscklogs 0770 root system
146
Colin Cross31712be2010-04-09 12:26:06 -0700147on post-fs
Brian Swetland56de7a12010-09-08 15:06:45 -0700148 # once everything is setup, no need to modify /
149 mount rootfs rootfs / ro remount
Jeff Sharkey885342a2012-08-14 21:00:22 -0700150 # mount shared so changes propagate into child namespaces
151 mount rootfs rootfs / shared rec
Brian Swetland56de7a12010-09-08 15:06:45 -0700152
Ken Sumrall752923c2010-12-03 16:33:31 -0800153 # We chown/chmod /cache again so because mount is run as root + defaults
154 chown system cache /cache
155 chmod 0770 /cache
Stephen Smalley1eee4192012-01-13 08:54:34 -0500156 # We restorecon /cache in case the cache partition has been reset.
157 restorecon /cache
Ken Sumrall752923c2010-12-03 16:33:31 -0800158
159 # This may have been created by the recovery system with odd permissions
160 chown system cache /cache/recovery
161 chmod 0770 /cache/recovery
Stephen Smalley1eee4192012-01-13 08:54:34 -0500162 # This may have been created by the recovery system with the wrong context.
163 restorecon /cache/recovery
Ken Sumrall752923c2010-12-03 16:33:31 -0800164
165 #change permissions on vmallocinfo so we can grab it from bugreports
166 chown root log /proc/vmallocinfo
167 chmod 0440 /proc/vmallocinfo
168
Dima Zavin94812662012-09-25 14:22:02 -0700169 chown root log /proc/slabinfo
170 chmod 0440 /proc/slabinfo
171
Ken Sumrall752923c2010-12-03 16:33:31 -0800172 #change permissions on kmsg & sysrq-trigger so bugreports can grab kthread stacks
173 chown root system /proc/kmsg
174 chmod 0440 /proc/kmsg
175 chown root system /proc/sysrq-trigger
176 chmod 0220 /proc/sysrq-trigger
Colin Crossb35e36e2012-08-02 18:14:33 -0700177 chown system log /proc/last_kmsg
178 chmod 0440 /proc/last_kmsg
Ken Sumrall752923c2010-12-03 16:33:31 -0800179
180 # create the lost+found directories, so as to enforce our permissions
Chia-chi Yehea744142011-07-08 16:52:18 -0700181 mkdir /cache/lost+found 0770 root root
Ken Sumrall752923c2010-12-03 16:33:31 -0800182
183on post-fs-data
Colin Cross31712be2010-04-09 12:26:06 -0700184 # We chown/chmod /data again so because mount is run as root + defaults
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800185 chown system system /data
186 chmod 0771 /data
Stephen Smalley1eee4192012-01-13 08:54:34 -0500187 # We restorecon /data in case the userdata partition has been reset.
188 restorecon /data
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800189
Nick Kralevichb410eb12013-09-17 16:18:23 -0700190 # Avoid predictable entropy pool. Carry over entropy from previous boot.
191 copy /data/system/entropy.dat /dev/urandom
192
San Mehatf26d6ce2009-09-01 09:11:04 -0700193 # Create dump dir and collect dumps.
194 # Do this before we mount cache so eventually we can use cache for
195 # storing dumps on platforms which do not have a dedicated dump partition.
Chia-chi Yehea744142011-07-08 16:52:18 -0700196 mkdir /data/dontpanic 0750 root log
San Mehatf26d6ce2009-09-01 09:11:04 -0700197
198 # Collect apanic data, free resources and re-arm trigger
199 copy /proc/apanic_console /data/dontpanic/apanic_console
Mike Lockwood25f1a5a2009-09-11 17:13:28 -0400200 chown root log /data/dontpanic/apanic_console
Mike Lockwood93324822009-09-08 22:55:59 -0400201 chmod 0640 /data/dontpanic/apanic_console
San Mehat020f35f2009-09-01 15:38:18 -0700202
San Mehatf26d6ce2009-09-01 09:11:04 -0700203 copy /proc/apanic_threads /data/dontpanic/apanic_threads
Mike Lockwood25f1a5a2009-09-11 17:13:28 -0400204 chown root log /data/dontpanic/apanic_threads
Mike Lockwood93324822009-09-08 22:55:59 -0400205 chmod 0640 /data/dontpanic/apanic_threads
San Mehat020f35f2009-09-01 15:38:18 -0700206
San Mehatf26d6ce2009-09-01 09:11:04 -0700207 write /proc/apanic_console 1
208
Ken Sumrall752923c2010-12-03 16:33:31 -0800209 # create basic filesystem structure
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800210 mkdir /data/misc 01771 system misc
Benoit Goby0245e152012-05-09 17:27:53 -0700211 mkdir /data/misc/adb 02750 system shell
Matthew Xie971153a2012-10-04 12:35:27 -0700212 mkdir /data/misc/bluedroid 0770 bluetooth net_bt_stack
Jaikumar Ganesheafdd862010-01-07 20:24:55 -0800213 mkdir /data/misc/bluetooth 0770 system system
Chia-chi Yeh9b4f1ff2009-09-18 10:35:26 +0800214 mkdir /data/misc/keystore 0700 keystore keystore
Brian Carlstrom04918932011-06-30 22:50:29 -0700215 mkdir /data/misc/keychain 0771 system system
Robert Greenwalt2aa33a32013-07-16 09:46:17 -0700216 mkdir /data/misc/radio 0770 system radio
Robert Greenwaltd6d47802012-09-26 16:04:27 -0700217 mkdir /data/misc/sms 0770 system radio
Elliott Hughesf820e852012-10-19 18:10:05 -0700218 mkdir /data/misc/zoneinfo 0775 system system
Chia-chi Yeh9bb4d412011-07-08 20:03:03 -0700219 mkdir /data/misc/vpn 0770 system vpn
Oscar Montemayord0aa32c2010-01-06 13:18:12 -0800220 mkdir /data/misc/systemkeys 0700 system system
Mike Lockwood48d116e2009-07-08 18:42:08 -0400221 mkdir /data/misc/wifi 0770 wifi wifi
Stephen Smalley82e87ed2014-01-29 13:53:03 -0500222 mkdir /data/misc/wifi/sockets 0770 wifi wifi
Stephen Smalley82e87ed2014-01-29 13:53:03 -0500223 mkdir /data/misc/wifi/wpa_supplicant 0770 wifi wifi
224 mkdir /data/misc/dhcp 0770 dhcp dhcp
225 # give system access to wpa_supplicant.conf for backup and restore
Amith Yamasanieefef322009-07-02 12:08:13 -0700226 chmod 0660 /data/misc/wifi/wpa_supplicant.conf
Chia-chi Yeh5ebced32012-03-07 14:52:10 -0800227 mkdir /data/local 0751 root root
Glenn Kastenb0f908a2013-02-22 14:54:45 -0800228 mkdir /data/misc/media 0700 media media
Stephen Smalleydeb41e52013-10-01 09:21:47 -0400229
Nick Kralevichf3ef1272012-03-14 15:22:54 -0700230 # For security reasons, /data/local/tmp should always be empty.
231 # Do not place files or directories in /data/local/tmp
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800232 mkdir /data/local/tmp 0771 shell shell
233 mkdir /data/data 0771 system system
234 mkdir /data/app-private 0771 system system
Kenny Rootf8bbaba2012-04-12 15:01:52 -0700235 mkdir /data/app-asec 0700 root root
Kenny Root50544172012-09-08 22:39:25 -0700236 mkdir /data/app-lib 0771 system system
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800237 mkdir /data/app 0771 system system
238 mkdir /data/property 0700 root root
Mike Lockwood9dd2eef2011-12-11 20:25:16 -0800239 mkdir /data/ssh 0750 root shell
240 mkdir /data/ssh/empty 0700 root root
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800241
Chia-chi Yehea744142011-07-08 16:52:18 -0700242 # create dalvik-cache, so as to enforce our permissions
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800243 mkdir /data/dalvik-cache 0771 system system
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800244
MÃ¥rten Kongstadb45280d2011-05-30 10:24:54 +0200245 # create resource-cache and double-check the perms
246 mkdir /data/resource-cache 0771 system system
247 chown system system /data/resource-cache
248 chmod 0771 /data/resource-cache
249
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800250 # create the lost+found directories, so as to enforce our permissions
Chia-chi Yehea744142011-07-08 16:52:18 -0700251 mkdir /data/lost+found 0770 root root
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800252
James Dong09cdc0e2012-01-06 15:19:26 -0800253 # create directory for DRM plug-ins - give drm the read/write access to
254 # the following directory.
255 mkdir /data/drm 0770 drm drm
aimitakeshie572d592010-07-27 08:38:35 +0900256
Jeff Tinker08d64302013-04-23 19:54:17 -0700257 # create directory for MediaDrm plug-ins - give drm the read/write access to
258 # the following directory.
259 mkdir /data/mediadrm 0770 mediadrm mediadrm
260
Jeff Sharkeyfb4f7ac2013-03-14 14:27:38 -0700261 # symlink to bugreport storage location
262 symlink /data/data/com.android.shell/files/bugreports /data/bugreports
263
William Robertsbfd71b42013-01-23 14:05:04 -0800264 # Separate location for storing security policy files on data
William Robertsd43bab72013-04-15 13:56:22 -0700265 mkdir /data/security 0711 system system
William Robertsbfd71b42013-01-23 14:05:04 -0800266
Stephen Smalley6552f682013-08-26 10:45:05 -0400267 # Reload policy from /data/security if present.
268 setprop selinux.reload_policy 1
269
Stephen Smalleyf2b7ee72014-02-06 13:52:52 -0500270 # Set SELinux security contexts on upgrade or policy update.
271 restorecon_recursive /data
272
Ken Sumrall752923c2010-12-03 16:33:31 -0800273 # If there is no fs-post-data action in the init.<device>.rc file, you
274 # must uncomment this line, otherwise encrypted filesystems
275 # won't work.
276 # Set indication (checked by vold) that we have finished this action
277 #setprop vold.post_fs_data_done 1
278
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800279on boot
280# basic network init
281 ifup lo
282 hostname localhost
283 domainname localdomain
284
285# set RLIMIT_NICE to allow priorities from 19 to -20
286 setrlimit 13 40 40
287
Dianne Hackborn06787f42011-08-07 16:30:24 -0700288# Memory management. Basic kernel parameters, and allow the high
289# level system server to be able to adjust the kernel OOM driver
Glenn Kastenb91bd9f2012-04-19 16:18:37 -0700290# parameters to match how it is managing things.
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800291 write /proc/sys/vm/overcommit_memory 1
The Android Open Source Projecte037fd72009-03-13 13:04:37 -0700292 write /proc/sys/vm/min_free_order_shift 4
Dianne Hackborn06787f42011-08-07 16:30:24 -0700293 chown root system /sys/module/lowmemorykiller/parameters/adj
294 chmod 0664 /sys/module/lowmemorykiller/parameters/adj
295 chown root system /sys/module/lowmemorykiller/parameters/minfree
296 chmod 0664 /sys/module/lowmemorykiller/parameters/minfree
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800297
San Mehat831d8e12009-10-13 12:24:47 -0700298 # Tweak background writeout
299 write /proc/sys/vm/dirty_expire_centisecs 200
300 write /proc/sys/vm/dirty_background_ratio 5
301
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800302 # Permissions for System Server and daemons.
303 chown radio system /sys/android_power/state
304 chown radio system /sys/android_power/request_state
305 chown radio system /sys/android_power/acquire_full_wake_lock
306 chown radio system /sys/android_power/acquire_partial_wake_lock
307 chown radio system /sys/android_power/release_wake_lock
Arve Hjønnevåg70a163f2012-05-02 17:57:50 -0700308 chown system system /sys/power/autosleep
Arve Hjønnevåg1670f832012-03-20 20:33:09 -0700309 chown system system /sys/power/state
310 chown system system /sys/power/wakeup_count
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800311 chown radio system /sys/power/wake_lock
312 chown radio system /sys/power/wake_unlock
313 chmod 0660 /sys/power/state
314 chmod 0660 /sys/power/wake_lock
315 chmod 0660 /sys/power/wake_unlock
Todd Poynor0653b972012-04-11 14:48:51 -0700316
317 chown system system /sys/devices/system/cpu/cpufreq/interactive/timer_rate
318 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/timer_rate
Todd Poynor2b5b3bb2012-12-20 18:52:03 -0800319 chown system system /sys/devices/system/cpu/cpufreq/interactive/timer_slack
320 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/timer_slack
Todd Poynor0653b972012-04-11 14:48:51 -0700321 chown system system /sys/devices/system/cpu/cpufreq/interactive/min_sample_time
322 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/min_sample_time
323 chown system system /sys/devices/system/cpu/cpufreq/interactive/hispeed_freq
324 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/hispeed_freq
Todd Poynor2b5b3bb2012-12-20 18:52:03 -0800325 chown system system /sys/devices/system/cpu/cpufreq/interactive/target_loads
326 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/target_loads
Todd Poynor0653b972012-04-11 14:48:51 -0700327 chown system system /sys/devices/system/cpu/cpufreq/interactive/go_hispeed_load
328 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/go_hispeed_load
Todd Poynorf35c2032012-04-19 13:17:24 -0700329 chown system system /sys/devices/system/cpu/cpufreq/interactive/above_hispeed_delay
330 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/above_hispeed_delay
Todd Poynor8d3ea1d2012-04-24 15:37:13 -0700331 chown system system /sys/devices/system/cpu/cpufreq/interactive/boost
332 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/boost
Todd Poynor4ff10e62012-05-03 15:20:48 -0700333 chown system system /sys/devices/system/cpu/cpufreq/interactive/boostpulse
Todd Poynor33045a62012-04-27 20:21:18 -0700334 chown system system /sys/devices/system/cpu/cpufreq/interactive/input_boost
335 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/input_boost
Todd Poynor4f247d72012-12-19 17:43:06 -0800336 chown system system /sys/devices/system/cpu/cpufreq/interactive/boostpulse_duration
337 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/boostpulse_duration
Todd Poynor6b5de1c2013-03-25 13:17:13 -0700338 chown system system /sys/devices/system/cpu/cpufreq/interactive/io_is_busy
339 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/io_is_busy
Todd Poynor0653b972012-04-11 14:48:51 -0700340
341 # Assume SMP uses shared cpufreq policy for all CPUs
342 chown system system /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
343 chmod 0660 /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
344
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800345 chown system system /sys/class/timed_output/vibrator/enable
346 chown system system /sys/class/leds/keyboard-backlight/brightness
347 chown system system /sys/class/leds/lcd-backlight/brightness
348 chown system system /sys/class/leds/button-backlight/brightness
The Android Open Source Projectf614d642009-03-18 17:39:49 -0700349 chown system system /sys/class/leds/jogball-backlight/brightness
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800350 chown system system /sys/class/leds/red/brightness
351 chown system system /sys/class/leds/green/brightness
352 chown system system /sys/class/leds/blue/brightness
353 chown system system /sys/class/leds/red/device/grpfreq
354 chown system system /sys/class/leds/red/device/grppwm
355 chown system system /sys/class/leds/red/device/blink
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800356 chown system system /sys/class/timed_output/vibrator/enable
357 chown system system /sys/module/sco/parameters/disable_esco
358 chown system system /sys/kernel/ipv4/tcp_wmem_min
359 chown system system /sys/kernel/ipv4/tcp_wmem_def
360 chown system system /sys/kernel/ipv4/tcp_wmem_max
361 chown system system /sys/kernel/ipv4/tcp_rmem_min
362 chown system system /sys/kernel/ipv4/tcp_rmem_def
363 chown system system /sys/kernel/ipv4/tcp_rmem_max
364 chown root radio /proc/cmdline
365
366# Define TCP buffer sizes for various networks
367# ReadMin, ReadInitial, ReadMax, WriteMin, WriteInitial, WriteMax,
Jianzheng Zhou52ea5102013-11-15 13:44:00 +0800368 setprop net.tcp.buffersize.default 4096,87380,110208,4096,16384,110208
369 setprop net.tcp.buffersize.wifi 524288,1048576,2097152,262144,524288,1048576
370 setprop net.tcp.buffersize.ethernet 524288,1048576,3145728,524288,1048576,2097152
371 setprop net.tcp.buffersize.lte 524288,1048576,2097152,262144,524288,1048576
372 setprop net.tcp.buffersize.umts 4094,87380,110208,4096,16384,110208
373 setprop net.tcp.buffersize.hspa 4094,87380,262144,4096,16384,262144
374 setprop net.tcp.buffersize.hsupa 4094,87380,262144,4096,16384,262144
375 setprop net.tcp.buffersize.hsdpa 4094,87380,262144,4096,16384,262144
376 setprop net.tcp.buffersize.hspap 4094,87380,1220608,4096,16384,1220608
377 setprop net.tcp.buffersize.edge 4093,26280,35040,4096,16384,35040
378 setprop net.tcp.buffersize.gprs 4092,8760,11680,4096,8760,11680
379 setprop net.tcp.buffersize.evdo 4094,87380,262144,4096,16384,262144
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800380
Ken Sumrall752923c2010-12-03 16:33:31 -0800381 class_start core
382 class_start main
383
384on nonencrypted
385 class_start late_start
386
Dima Zavinca47cef2011-08-24 15:28:23 -0700387on charger
388 class_start charger
389
Ken Sumrall752923c2010-12-03 16:33:31 -0800390on property:vold.decrypt=trigger_reset_main
391 class_reset main
392
Ken Sumrallc5c51032011-03-08 17:01:29 -0800393on property:vold.decrypt=trigger_load_persist_props
394 load_persist_props
395
Ken Sumrall752923c2010-12-03 16:33:31 -0800396on property:vold.decrypt=trigger_post_fs_data
397 trigger post-fs-data
398
Ken Sumralle4349152011-01-17 14:26:34 -0800399on property:vold.decrypt=trigger_restart_min_framework
400 class_start main
401
Ken Sumrall752923c2010-12-03 16:33:31 -0800402on property:vold.decrypt=trigger_restart_framework
403 class_start main
404 class_start late_start
405
406on property:vold.decrypt=trigger_shutdown_framework
407 class_reset late_start
408 class_reset main
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800409
Nick Kralevichca8e66a2013-04-18 12:20:02 -0700410on property:sys.powerctl=*
411 powerctl ${sys.powerctl}
412
Colin Cross57fdb5c2013-07-25 10:34:30 -0700413# system server cannot write to /proc/sys files, so proxy it through init
414on property:sys.sysctl.extra_free_kbytes=*
415 write /proc/sys/vm/extra_free_kbytes ${sys.sysctl.extra_free_kbytes}
416
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800417## Daemon processes to be run by init.
418##
Colin Crossf83d0b92010-04-21 12:04:20 -0700419service ueventd /sbin/ueventd
Ken Sumrall752923c2010-12-03 16:33:31 -0800420 class core
Colin Crossf83d0b92010-04-21 12:04:20 -0700421 critical
Stephen Smalley1eee4192012-01-13 08:54:34 -0500422 seclabel u:r:ueventd:s0
Colin Crossf83d0b92010-04-21 12:04:20 -0700423
Mark Salyzyn3c253dc2014-03-21 16:06:54 -0700424service logd /system/bin/logd
425 class core
426 socket logd stream 0666 logd logd
427 socket logdr seqpacket 0666 logd logd
428 socket logdw dgram 0222 logd logd
429 seclabel u:r:logd:s0
430
Todd Poynor13f4c9f2013-06-19 15:09:35 -0700431service healthd /sbin/healthd
432 class core
433 critical
434 seclabel u:r:healthd:s0
435
436service healthd-charger /sbin/healthd -n
437 class charger
438 critical
439 seclabel u:r:healthd:s0
440
Brian Swetlandb4d65392010-10-27 15:40:23 -0700441service console /system/bin/sh
Ken Sumrall752923c2010-12-03 16:33:31 -0800442 class core
Brian Swetlandb4d65392010-10-27 15:40:23 -0700443 console
444 disabled
445 user shell
446 group log
Stephen Smalley610653f2013-12-23 14:11:02 -0500447 seclabel u:r:shell:s0
Brian Swetlandb4d65392010-10-27 15:40:23 -0700448
Mike Lockwoodd49b4ef2010-11-19 09:12:27 -0500449on property:ro.debuggable=1
Brian Swetlandb4d65392010-10-27 15:40:23 -0700450 start console
451
Mike Lockwood352dfdf2011-06-08 17:40:00 -0700452# adbd is controlled via property triggers in init.<platform>.usb.rc
Nick Kralevichd49aa252014-01-18 09:25:04 -0800453service adbd /sbin/adbd --root_seclabel=u:r:su:s0
Ken Sumrall752923c2010-12-03 16:33:31 -0800454 class core
Benoit Goby0574d6b2012-04-24 15:07:12 -0700455 socket adbd stream 660 system system
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800456 disabled
Stephen Smalley1eee4192012-01-13 08:54:34 -0500457 seclabel u:r:adbd:s0
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800458
459# adbd on at boot in emulator
460on property:ro.kernel.qemu=1
461 start adbd
462
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800463service servicemanager /system/bin/servicemanager
Ken Sumrall752923c2010-12-03 16:33:31 -0800464 class core
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800465 user system
Nick Kralevich333f24b2010-12-10 14:10:16 -0800466 group system
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800467 critical
Todd Poynor13f4c9f2013-06-19 15:09:35 -0700468 onrestart restart healthd
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800469 onrestart restart zygote
470 onrestart restart media
Mathias Agopian04a87592011-10-31 14:27:36 -0700471 onrestart restart surfaceflinger
472 onrestart restart drm
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800473
The Android Open Source Projecte4749f32009-03-09 11:52:15 -0700474service vold /system/bin/vold
Ken Sumrall752923c2010-12-03 16:33:31 -0800475 class core
The Android Open Source Projecte4749f32009-03-09 11:52:15 -0700476 socket vold stream 0660 root mount
San Mehatf0cb74e2010-02-26 10:01:14 -0800477 ioprio be 2
The Android Open Source Projecte4749f32009-03-09 11:52:15 -0700478
San Mehat192277c2010-01-15 07:48:35 -0800479service netd /system/bin/netd
Ken Sumrall752923c2010-12-03 16:33:31 -0800480 class main
San Mehat192277c2010-01-15 07:48:35 -0800481 socket netd stream 0660 root system
Brad Fitzpatrick8c5669f2010-10-27 10:23:16 -0700482 socket dnsproxyd stream 0660 root inet
Robert Greenwalt1d91fcf2012-03-27 16:59:27 -0700483 socket mdns stream 0660 root system
San Mehat192277c2010-01-15 07:48:35 -0800484
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800485service debuggerd /system/bin/debuggerd
Ken Sumrall752923c2010-12-03 16:33:31 -0800486 class main
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800487
Dan Willemsen78ef91a2014-02-16 11:30:27 -0800488service debuggerd64 /system/bin/debuggerd64
489 class main
490
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800491service ril-daemon /system/bin/rild
vidya rao04cf6292011-06-24 12:15:20 -0700492 class main
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800493 socket rild stream 660 root radio
494 socket rild-debug stream 660 radio system
495 user root
Jeff Sharkey61f13592012-08-20 14:31:47 -0700496 group radio cache inet misc audio log
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800497
Mathias Agopiana40481b2011-03-03 18:48:30 -0800498service surfaceflinger /system/bin/surfaceflinger
499 class main
500 user system
Dima Zavinece565c2012-10-04 17:02:26 -0700501 group graphics drmrpc
Mathias Agopiana40481b2011-03-03 18:48:30 -0800502 onrestart restart zygote
503
aimitakeshie572d592010-07-27 08:38:35 +0900504service drm /system/bin/drmserver
Ken Sumrall752923c2010-12-03 16:33:31 -0800505 class main
aimitakeshie572d592010-07-27 08:38:35 +0900506 user drm
Jeff Sharkey61f13592012-08-20 14:31:47 -0700507 group drm system inet drmrpc
aimitakeshie572d592010-07-27 08:38:35 +0900508
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800509service media /system/bin/mediaserver
Ken Sumrall752923c2010-12-03 16:33:31 -0800510 class main
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800511 user media
Jeff Tinker08d64302013-04-23 19:54:17 -0700512 group audio camera inet net_bt net_bt_admin net_bw_acct drmrpc mediadrm
San Mehatf0cb74e2010-02-26 10:01:14 -0800513 ioprio rt 4
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800514
Mathias Agopian8b2cf9f2009-05-20 18:09:51 -0700515service bootanim /system/bin/bootanimation
Ken Sumrall752923c2010-12-03 16:33:31 -0800516 class main
Mathias Agopian8b2cf9f2009-05-20 18:09:51 -0700517 user graphics
518 group graphics
519 disabled
520 oneshot
521
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800522service installd /system/bin/installd
Ken Sumrall752923c2010-12-03 16:33:31 -0800523 class main
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800524 socket installd stream 600 system system
525
Doug Zongkerd52f54c2009-07-23 15:18:34 -0700526service flash_recovery /system/etc/install-recovery.sh
Ken Sumrall752923c2010-12-03 16:33:31 -0800527 class main
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800528 oneshot
Chung-yih Wang1f75d702009-06-01 19:04:05 +0800529
Chia-chi Yeh51afbf52009-07-01 07:06:47 +0800530service racoon /system/bin/racoon
Ken Sumrall752923c2010-12-03 16:33:31 -0800531 class main
Chung-yih Wang1f75d702009-06-01 19:04:05 +0800532 socket racoon stream 600 system system
Chia-chi Yeh9bb4d412011-07-08 20:03:03 -0700533 # IKE uses UDP port 500. Racoon will setuid to vpn after binding the port.
Chia-chi Yeha2468712011-08-08 10:11:40 -0700534 group vpn net_admin inet
Chung-yih Wang1f75d702009-06-01 19:04:05 +0800535 disabled
536 oneshot
537
538service mtpd /system/bin/mtpd
Ken Sumrall752923c2010-12-03 16:33:31 -0800539 class main
Chung-yih Wang1f75d702009-06-01 19:04:05 +0800540 socket mtpd stream 600 system system
Chia-chi Yeh51afbf52009-07-01 07:06:47 +0800541 user vpn
Chia-chi Yeha2468712011-08-08 10:11:40 -0700542 group vpn net_admin inet net_raw
Chung-yih Wang1f75d702009-06-01 19:04:05 +0800543 disabled
544 oneshot
545
Chia-chi Yeh9b4f1ff2009-09-18 10:35:26 +0800546service keystore /system/bin/keystore /data/misc/keystore
Ken Sumrall752923c2010-12-03 16:33:31 -0800547 class main
Chung-yih Wang1f75d702009-06-01 19:04:05 +0800548 user keystore
Kenny Rootad5b9c72012-02-23 16:31:10 -0800549 group keystore drmrpc
Chung-yih Wang1f75d702009-06-01 19:04:05 +0800550
Mike Lockwoodabe3a9c2009-09-02 18:09:26 -0400551service dumpstate /system/bin/dumpstate -s
Ken Sumrall752923c2010-12-03 16:33:31 -0800552 class main
Mike Lockwoodabe3a9c2009-09-02 18:09:26 -0400553 socket dumpstate stream 0660 shell log
554 disabled
555 oneshot
Mike Lockwood9dd2eef2011-12-11 20:25:16 -0800556
557service sshd /system/bin/start-ssh
558 class main
Mike Lockwood19155b52012-03-21 11:58:05 -0700559 disabled
Robert Greenwalt1d91fcf2012-03-27 16:59:27 -0700560
561service mdnsd /system/bin/mdnsd
562 class main
563 user mdnsr
564 group inet net_raw
565 socket mdnsd stream 0660 mdnsr inet
566 disabled
567 oneshot