blob: ee70846d41cbecdb878d94063d495cb127296168 [file] [log] [blame]
Nick Kralevichf3ef1272012-03-14 15:22:54 -07001# Copyright (C) 2012 The Android Open Source Project
2#
3# IMPORTANT: Do not create world writable files or directories.
4# This is a common source of Android security bugs.
5#
6
Ying Wang5748ee92013-07-23 18:03:37 -07007import /init.environ.rc
Mike Lockwood4f5d5172012-04-04 11:26:59 -07008import /init.usb.rc
Mike Lockwood35ea5e42012-08-28 10:25:13 -07009import /init.${ro.hardware}.rc
Yueyao Zhuf7c34ad2017-05-18 12:46:34 -070010import /vendor/etc/init/hw/init.${ro.hardware}.rc
Badhri Jagan Sridharane1801862015-08-28 19:32:45 -070011import /init.usb.configfs.rc
Narayan Kamath4456a552014-03-31 11:08:02 +010012import /init.${ro.zygote}.rc
Dima Zavin7634bf82011-12-16 14:23:22 -080013
Colin Crossf83d0b92010-04-21 12:04:20 -070014on early-init
Jiyong Park25990882019-01-02 23:37:15 +090015 # Mount shared so changes propagate into child namespaces
16 # Do this before other processes are started from init. Otherwise,
17 # processes launched while the propagation type of / is 'private'
18 # won't get mount events from others.
19 mount rootfs rootfs / shared rec
20
Dima Zavin4a253902011-11-04 12:45:52 -070021 # Set init and its forked children's oom_adj.
Todd Poynor46765502013-09-16 19:32:03 -070022 write /proc/1/oom_score_adj -1000
Dima Zavin4a253902011-11-04 12:45:52 -070023
Nick Kralevichd28a5352015-10-09 17:09:10 -070024 # Disable sysrq from keyboard
25 write /proc/sys/kernel/sysrq 0
26
Stephen Smalleydeb41e52013-10-01 09:21:47 -040027 # Set the security context of /adb_keys if present.
28 restorecon /adb_keys
29
Alex Deymobb968fb2016-02-29 17:23:36 -080030 # Set the security context of /postinstall if present.
31 restorecon /postinstall
32
Robert Beneac6385692017-05-31 16:07:53 -070033 # Mount cgroup mount point for cpu accounting
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -080034 mount cgroup none /acct nodev noexec nosuid cpuacct
Luis Hector Chavez0451fd62018-07-30 13:06:46 -070035 chmod 0555 /acct
Robert Beneac6385692017-05-31 16:07:53 -070036 mkdir /acct/uid
37
38 # root memory control cgroup, used by lmkd
39 mkdir /dev/memcg 0700 root system
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -080040 mount cgroup none /dev/memcg nodev noexec nosuid memory
Mark Salyzyn64d97d82018-04-09 09:50:32 -070041 # memory.pressure_level used by lmkd
42 chown root system /dev/memcg/memory.pressure_level
43 chmod 0040 /dev/memcg/memory.pressure_level
Robert Beneac6385692017-05-31 16:07:53 -070044 # app mem cgroups, used by activity manager, lmkd and zygote
45 mkdir /dev/memcg/apps/ 0755 system system
Robert Benea3280e482017-06-27 23:09:03 -070046 # cgroup for system_server and surfaceflinger
47 mkdir /dev/memcg/system 0550 system system
Robert Beneac6385692017-05-31 16:07:53 -070048
Jiyong Park25990882019-01-02 23:37:15 +090049 prepare_bootstrap_bionic
50
Colin Crossf83d0b92010-04-21 12:04:20 -070051 start ueventd
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080052
53on init
Riley Andrews6dfdc7c2014-06-18 20:35:40 -070054 sysclktz 0
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080055
Nick Kralevich27cb4102016-01-22 18:02:29 -080056 # Mix device-specific information into the entropy pool
57 copy /proc/cmdline /dev/urandom
58 copy /default.prop /dev/urandom
59
Elliott Hughes5a0a51b2018-08-22 13:21:21 -070060 symlink /proc/self/fd/0 /dev/stdin
61 symlink /proc/self/fd/1 /dev/stdout
62 symlink /proc/self/fd/2 /dev/stderr
63
Elliott Hughesff1ef9f2017-12-06 08:59:02 -080064 symlink /system/bin /bin
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080065 symlink /system/etc /etc
Elliott Hughesff1ef9f2017-12-06 08:59:02 -080066
67 # Backward compatibility.
Brian Swetlandbb6f68c2009-09-18 15:31:23 -070068 symlink /sys/kernel/debug /d
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080069
Elliott Hughes3a5d71a2015-02-13 16:47:02 -080070 # Link /vendor to /system/vendor for devices without a vendor partition.
Daniel Rosenbergf67d6bd2014-06-26 14:55:04 -070071 symlink /system/vendor /vendor
72
Todd Kjosba8a4752015-10-26 16:22:11 -070073 # Create energy-aware scheduler tuning nodes
Todd Kjos11cde562016-02-23 09:00:36 -080074 mkdir /dev/stune
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -080075 mount cgroup none /dev/stune nodev noexec nosuid schedtune
Todd Kjos11cde562016-02-23 09:00:36 -080076 mkdir /dev/stune/foreground
Tim Murray5dcff8f2016-07-11 13:57:31 -070077 mkdir /dev/stune/background
Tim Murray955694b2016-07-11 11:40:15 -070078 mkdir /dev/stune/top-app
Joel Fernandesf50d1092016-12-19 11:01:55 -080079 mkdir /dev/stune/rt
Todd Kjos11cde562016-02-23 09:00:36 -080080 chown system system /dev/stune
81 chown system system /dev/stune/foreground
Tim Murray5dcff8f2016-07-11 13:57:31 -070082 chown system system /dev/stune/background
Tim Murray955694b2016-07-11 11:40:15 -070083 chown system system /dev/stune/top-app
Joel Fernandesf50d1092016-12-19 11:01:55 -080084 chown system system /dev/stune/rt
Todd Kjos11cde562016-02-23 09:00:36 -080085 chown system system /dev/stune/tasks
86 chown system system /dev/stune/foreground/tasks
Tim Murray5dcff8f2016-07-11 13:57:31 -070087 chown system system /dev/stune/background/tasks
Tim Murray955694b2016-07-11 11:40:15 -070088 chown system system /dev/stune/top-app/tasks
Joel Fernandesf50d1092016-12-19 11:01:55 -080089 chown system system /dev/stune/rt/tasks
Todd Kjos11cde562016-02-23 09:00:36 -080090 chmod 0664 /dev/stune/tasks
91 chmod 0664 /dev/stune/foreground/tasks
Tim Murray5dcff8f2016-07-11 13:57:31 -070092 chmod 0664 /dev/stune/background/tasks
Tim Murray955694b2016-07-11 11:40:15 -070093 chmod 0664 /dev/stune/top-app/tasks
Joel Fernandesf50d1092016-12-19 11:01:55 -080094 chmod 0664 /dev/stune/rt/tasks
Todd Kjosba8a4752015-10-26 16:22:11 -070095
Jeff Sharkeyfc000482015-03-16 10:17:47 -070096 restorecon_recursive /mnt
Jeff Sharkey5dd0f862012-08-17 16:01:16 -070097
Luis Hector Chavez87749452018-02-14 08:35:01 -080098 mount configfs none /config nodev noexec nosuid
Daniel Rosenberg79035232017-11-29 14:49:08 -080099 chmod 0770 /config/sdcardfs
Daniel Rosenberg4edec252016-02-18 19:48:31 -0800100 chown system package_info /config/sdcardfs
101
San Mehat6ea3cc62010-02-19 18:25:22 -0800102 mkdir /mnt/secure 0700 root root
Jeff Sharkeyfc000482015-03-16 10:17:47 -0700103 mkdir /mnt/secure/asec 0700 root root
104 mkdir /mnt/asec 0755 root system
105 mkdir /mnt/obb 0755 root system
106 mkdir /mnt/media_rw 0750 root media_rw
107 mkdir /mnt/user 0755 root root
108 mkdir /mnt/user/0 0755 root root
Jeff Sharkeyae0a5ac2015-04-06 14:08:54 -0700109 mkdir /mnt/expand 0771 system system
Daichi Hirono7abc71e2015-12-11 13:29:04 +0900110 mkdir /mnt/appfuse 0711 root root
San Mehat6ea3cc62010-02-19 18:25:22 -0800111
Jeff Sharkeyf38f29c2015-06-23 14:30:37 -0700112 # Storage views to support runtime permissions
Jeff Sharkeyb9f438f2015-08-06 11:39:44 -0700113 mkdir /mnt/runtime 0700 root root
114 mkdir /mnt/runtime/default 0755 root root
115 mkdir /mnt/runtime/default/self 0755 root root
116 mkdir /mnt/runtime/read 0755 root root
117 mkdir /mnt/runtime/read/self 0755 root root
118 mkdir /mnt/runtime/write 0755 root root
119 mkdir /mnt/runtime/write/self 0755 root root
Sudheer Shanka81c687d2019-01-16 23:25:28 -0800120 mkdir /mnt/runtime/full 0755 root root
121 mkdir /mnt/runtime/full/self 0755 root root
San Mehat6ea3cc62010-02-19 18:25:22 -0800122
Jeff Sharkeyfc000482015-03-16 10:17:47 -0700123 # Symlink to keep legacy apps working in multi-user world
Jeff Sharkeyfc000482015-03-16 10:17:47 -0700124 symlink /storage/self/primary /sdcard
Nick Kralevichd2f0a2c2016-04-12 20:36:01 -0700125 symlink /storage/self/primary /mnt/sdcard
Jeff Sharkeyb9f438f2015-08-06 11:39:44 -0700126 symlink /mnt/user/0/primary /mnt/runtime/default/self/primary
Kenny Rootc7858a32010-07-15 12:14:44 -0700127
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800128 write /proc/sys/kernel/panic_on_oops 1
129 write /proc/sys/kernel/hung_task_timeout_secs 0
130 write /proc/cpu/alignment 4
Riley Andrewse850f572015-07-20 16:01:48 -0700131
132 # scheduler tunables
133 # Disable auto-scaling of scheduler tunables with hotplug. The tunables
134 # will vary across devices in unpredictable ways if allowed to scale with
135 # cpu cores.
136 write /proc/sys/kernel/sched_tunable_scaling 0
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800137 write /proc/sys/kernel/sched_latency_ns 10000000
138 write /proc/sys/kernel/sched_wakeup_granularity_ns 2000000
San Mehat7baff712009-09-16 13:32:23 -0700139 write /proc/sys/kernel/sched_child_runs_first 0
Riley Andrewse850f572015-07-20 16:01:48 -0700140
Nick Kralevichd707fb32011-10-06 11:47:11 -0700141 write /proc/sys/kernel/randomize_va_space 2
Nick Kralevich27cca212011-12-05 14:48:08 -0800142 write /proc/sys/vm/mmap_min_addr 32768
Nick Kralevichbe341cc2013-02-21 18:36:43 -0800143 write /proc/sys/net/ipv4/ping_group_range "0 2147483647"
Mark Salyzyn39944c82015-09-08 11:24:07 -0700144 write /proc/sys/net/unix/max_dgram_qlen 600
Glenn Kastenb91bd9f2012-04-19 16:18:37 -0700145 write /proc/sys/kernel/sched_rt_runtime_us 950000
146 write /proc/sys/kernel/sched_rt_period_us 1000000
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800147
Sandeep Patil5fee4962016-12-07 10:55:45 -0800148 # Assign reasonable ceiling values for socket rcv/snd buffers.
149 # These should almost always be overridden by the target per the
150 # the corresponding technology maximums.
151 write /proc/sys/net/core/rmem_max 262144
152 write /proc/sys/net/core/wmem_max 262144
153
Sreeram Ramachandranfd949222014-04-09 17:44:56 -0700154 # reflect fwmark from incoming packets onto generated replies
155 write /proc/sys/net/ipv4/fwmark_reflect 1
156 write /proc/sys/net/ipv6/fwmark_reflect 1
157
158 # set fwmark on accepted sockets
159 write /proc/sys/net/ipv4/tcp_fwmark_accept 1
160
Greg Hackmannf3fd1222014-12-03 09:57:00 -0800161 # disable icmp redirects
162 write /proc/sys/net/ipv4/conf/all/accept_redirects 0
163 write /proc/sys/net/ipv6/conf/all/accept_redirects 0
164
Nick Kralevich15ffc532017-08-25 12:55:52 -0700165 # /proc/net/fib_trie leaks interface IP addresses
166 chmod 0400 /proc/net/fib_trie
167
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700168 # Create cgroup mount points for process groups
San Mehat529520e2009-10-06 11:22:55 -0700169 mkdir /dev/cpuctl
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -0800170 mount cgroup none /dev/cpuctl nodev noexec nosuid cpu
San Mehat92175e02010-01-17 12:21:42 -0800171 chown system system /dev/cpuctl
San Mehat529520e2009-10-06 11:22:55 -0700172 chown system system /dev/cpuctl/tasks
Riley Andrews522d72b2014-10-03 17:02:53 -0700173 chmod 0666 /dev/cpuctl/tasks
Glenn Kastenb91bd9f2012-04-19 16:18:37 -0700174 write /dev/cpuctl/cpu.rt_period_us 1000000
Tim Murray3a29e342016-06-17 14:02:16 -0700175 write /dev/cpuctl/cpu.rt_runtime_us 950000
San Mehat529520e2009-10-06 11:22:55 -0700176
Tim Murrayb769c8d2015-06-08 14:56:29 -0700177 # sets up initial cpusets for ActivityManager
178 mkdir /dev/cpuset
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -0800179 mount cpuset none /dev/cpuset nodev noexec nosuid
Tim Murrayf429d372015-10-15 12:38:15 -0700180
Tim Murrayb769c8d2015-06-08 14:56:29 -0700181 # this ensures that the cpusets are present and usable, but the device's
182 # init.rc must actually set the correct cpus
Tim Murrayf429d372015-10-15 12:38:15 -0700183 mkdir /dev/cpuset/foreground
Wei Wang8dbd12b2017-04-13 18:27:35 -0700184 copy /dev/cpuset/cpus /dev/cpuset/foreground/cpus
185 copy /dev/cpuset/mems /dev/cpuset/foreground/mems
Tim Murrayf429d372015-10-15 12:38:15 -0700186 mkdir /dev/cpuset/background
Wei Wang8dbd12b2017-04-13 18:27:35 -0700187 copy /dev/cpuset/cpus /dev/cpuset/background/cpus
188 copy /dev/cpuset/mems /dev/cpuset/background/mems
Tim Murrayf429d372015-10-15 12:38:15 -0700189
190 # system-background is for system tasks that should only run on
191 # little cores, not on bigs
192 # to be used only by init, so don't change system-bg permissions
193 mkdir /dev/cpuset/system-background
Wei Wang8dbd12b2017-04-13 18:27:35 -0700194 copy /dev/cpuset/cpus /dev/cpuset/system-background/cpus
195 copy /dev/cpuset/mems /dev/cpuset/system-background/mems
Tim Murrayf429d372015-10-15 12:38:15 -0700196
Tim Murray658ae902018-04-13 10:15:49 -0700197 # restricted is for system tasks that are being throttled
198 # due to screen off.
199 mkdir /dev/cpuset/restricted
200 copy /dev/cpuset/cpus /dev/cpuset/restricted/cpus
201 copy /dev/cpuset/mems /dev/cpuset/restricted/mems
202
Tim Murray6647bb52016-01-11 16:16:35 -0800203 mkdir /dev/cpuset/top-app
Wei Wang8dbd12b2017-04-13 18:27:35 -0700204 copy /dev/cpuset/cpus /dev/cpuset/top-app/cpus
205 copy /dev/cpuset/mems /dev/cpuset/top-app/mems
Tim Murray6647bb52016-01-11 16:16:35 -0800206
Tim Murrayf429d372015-10-15 12:38:15 -0700207 # change permissions for all cpusets we'll touch at runtime
Tim Murrayb769c8d2015-06-08 14:56:29 -0700208 chown system system /dev/cpuset
209 chown system system /dev/cpuset/foreground
210 chown system system /dev/cpuset/background
Todd Kjosba8a4752015-10-26 16:22:11 -0700211 chown system system /dev/cpuset/system-background
Tim Murray6647bb52016-01-11 16:16:35 -0800212 chown system system /dev/cpuset/top-app
Tim Murray658ae902018-04-13 10:15:49 -0700213 chown system system /dev/cpuset/restricted
Tim Murrayb769c8d2015-06-08 14:56:29 -0700214 chown system system /dev/cpuset/tasks
215 chown system system /dev/cpuset/foreground/tasks
216 chown system system /dev/cpuset/background/tasks
Todd Kjosba8a4752015-10-26 16:22:11 -0700217 chown system system /dev/cpuset/system-background/tasks
Tim Murray6647bb52016-01-11 16:16:35 -0800218 chown system system /dev/cpuset/top-app/tasks
Tim Murray658ae902018-04-13 10:15:49 -0700219 chown system system /dev/cpuset/restricted/tasks
Tim Murray4284f9f2015-11-10 14:31:09 -0800220
221 # set system-background to 0775 so SurfaceFlinger can touch it
222 chmod 0775 /dev/cpuset/system-background
223
Jeff Vander Stoep3f62a022015-07-23 15:18:36 -0700224 chmod 0664 /dev/cpuset/foreground/tasks
225 chmod 0664 /dev/cpuset/background/tasks
Todd Kjosba8a4752015-10-26 16:22:11 -0700226 chmod 0664 /dev/cpuset/system-background/tasks
Tim Murray6647bb52016-01-11 16:16:35 -0800227 chmod 0664 /dev/cpuset/top-app/tasks
Tim Murray658ae902018-04-13 10:15:49 -0700228 chmod 0664 /dev/cpuset/restricted/tasks
Jeff Vander Stoep3f62a022015-07-23 15:18:36 -0700229 chmod 0664 /dev/cpuset/tasks
Tim Murrayb769c8d2015-06-08 14:56:29 -0700230
231
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700232 # qtaguid will limit access to specific data based on group memberships.
233 # net_bw_acct grants impersonation of socket owners.
234 # net_bw_stats grants access to other apps' detailed tagged-socket stats.
JP Abgrall3e54aab2013-01-04 14:34:58 -0800235 chown root net_bw_acct /proc/net/xt_qtaguid/ctrl
236 chown root net_bw_stats /proc/net/xt_qtaguid/stats
237
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700238 # Allow everybody to read the xt_qtaguid resource tracking misc dev.
239 # This is needed by any process that uses socket tagging.
JP Abgrall8e3ff702011-09-11 16:12:27 -0700240 chmod 0644 /dev/xt_qtaguid
241
Chenbo Feng2cba6f22017-10-23 11:57:59 -0700242 mkdir /dev/cg2_bpf
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -0800243 mount cgroup2 cg2_bpf /dev/cg2_bpf nodev noexec nosuid
Chenbo Feng2cba6f22017-10-23 11:57:59 -0700244 chown root root /dev/cg2_bpf
245 chmod 0600 /dev/cg2_bpf
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -0800246 mount bpf bpf /sys/fs/bpf nodev noexec nosuid
Chenbo Feng2cba6f22017-10-23 11:57:59 -0700247
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700248 # Create location for fs_mgr to store abbreviated output from filesystem
249 # checker programs.
Ken Sumrall4eaf9052013-09-18 17:49:21 -0700250 mkdir /dev/fscklogs 0770 root system
251
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700252 # pstore/ramoops previous console log
Luis Hector Chavezf8a7e372018-02-12 11:30:46 -0800253 mount pstore pstore /sys/fs/pstore nodev noexec nosuid
Mark Salyzyn7ab805e2018-06-29 10:32:11 -0700254 chown system log /sys/fs/pstore
255 chmod 0550 /sys/fs/pstore
Todd Poynor479efb52013-11-21 20:23:54 -0800256 chown system log /sys/fs/pstore/console-ramoops
257 chmod 0440 /sys/fs/pstore/console-ramoops
Mark Salyzyn4eb0ba02017-06-27 09:32:32 -0700258 chown system log /sys/fs/pstore/console-ramoops-0
259 chmod 0440 /sys/fs/pstore/console-ramoops-0
Mark Salyzyn4b0313e2014-12-15 07:52:19 -0800260 chown system log /sys/fs/pstore/pmsg-ramoops-0
261 chmod 0440 /sys/fs/pstore/pmsg-ramoops-0
Todd Poynor479efb52013-11-21 20:23:54 -0800262
Greg Hackmanncee87572015-01-26 10:40:29 -0800263 # enable armv8_deprecated instruction hooks
264 write /proc/sys/abi/swp 1
265
Greg Hackmann40a96e42016-02-01 09:59:44 -0800266 # Linux's execveat() syscall may construct paths containing /dev/fd
267 # expecting it to point to /proc/self/fd
268 symlink /proc/self/fd /dev/fd
269
Yueyao (Nathan) Zhu60c6dac2016-06-21 12:04:54 -0700270 export DOWNLOAD_CACHE /data/cache
271
Wei Wangabfbec32016-08-23 11:58:09 -0700272 # set RLIMIT_NICE to allow priorities from 19 to -20
Tom Cherrycb5fccc2017-08-28 12:53:56 -0700273 setrlimit nice 40 40
274
275 # Allow up to 32K FDs per process
276 setrlimit nofile 32768 32768
Wei Wangabfbec32016-08-23 11:58:09 -0700277
David Lin27b2c1e2017-03-08 17:36:18 -0800278 # This allows the ledtrig-transient properties to be created here so
279 # that they can be chown'd to system:system later on boot
280 write /sys/class/leds/vibrator/trigger "transient"
281
Haibo Huangd60a19b2018-11-04 09:50:05 -0800282 # This is used by Bionic to select optimized routines.
283 write /dev/cpu_variant:${ro.bionic.arch} ${ro.bionic.cpu_variant}
284 chmod 0444 /dev/cpu_variant:${ro.bionic.arch}
285 write /dev/cpu_variant:${ro.bionic.2nd_arch} ${ro.bionic.2nd_cpu_variant}
286 chmod 0444 /dev/cpu_variant:${ro.bionic.2nd_arch}
287
Martijn Coenen344a91a2018-10-02 16:43:16 +0200288 # Setup APEX mount point and its security context
289 mount tmpfs tmpfs /apex nodev noexec nosuid
290 chmod 0755 /apex
291 chown root root /apex
292 restorecon /apex
293
Tom Cherryf18b7482018-10-17 13:14:55 -0700294 # Start logd before any other services run to ensure we capture all of their logs.
295 start logd
296 # Start essential services.
297 start servicemanager
298 start hwservicemanager
299 start vndservicemanager
300
Riley Andrewse4b7b292014-06-16 15:06:21 -0700301# Healthd can trigger a full boot from charger mode by signaling this
302# property when the power button is held.
303on property:sys.boot_from_charger_mode=1
304 class_stop charger
305 trigger late-init
306
Paul Lawrence948410a2015-07-01 14:40:56 -0700307on load_persist_props_action
308 load_persist_props
Mark Salyzyn5c39e0a2015-04-20 08:55:02 -0700309 start logd
Mark Salyzyn48d06062015-03-11 14:45:05 -0700310 start logd-reinit
Riley Andrewse4b7b292014-06-16 15:06:21 -0700311
Riley Andrews80c7a5e2014-07-11 15:05:23 -0700312# Indicate to fw loaders that the relevant mounts are up.
313on firmware_mounts_complete
314 rm /dev/.booting
315
Riley Andrewse4b7b292014-06-16 15:06:21 -0700316# Mount filesystems and start core system services.
317on late-init
318 trigger early-fs
Wei Wangabfbec32016-08-23 11:58:09 -0700319
320 # Mount fstab in init.{$device}.rc by mount_all command. Optional parameter
321 # '--early' can be specified to skip entries with 'latemount'.
322 # /system and /vendor must be mounted by the end of the fs stage,
323 # while /data is optional.
Riley Andrewse4b7b292014-06-16 15:06:21 -0700324 trigger fs
325 trigger post-fs
Riley Andrewse4b7b292014-06-16 15:06:21 -0700326
Wei Wangabfbec32016-08-23 11:58:09 -0700327 # Mount fstab in init.{$device}.rc by mount_all with '--late' parameter
328 # to only mount entries with 'latemount'. This is needed if '--early' is
329 # specified in the previous mount_all command on the fs stage.
330 # With /system mounted and properties form /system + /factory available,
331 # some services can be started.
332 trigger late-fs
333
Paul Lawrence948410a2015-07-01 14:40:56 -0700334 # Now we can mount /data. File encryption requires keymaster to decrypt
Wei Wangabfbec32016-08-23 11:58:09 -0700335 # /data, which in turn can only be loaded when system properties are present.
Paul Lawrence948410a2015-07-01 14:40:56 -0700336 trigger post-fs-data
Wei Wangabfbec32016-08-23 11:58:09 -0700337
338 # Load persist properties and override properties (if enabled) from /data.
Paul Lawrence948410a2015-07-01 14:40:56 -0700339 trigger load_persist_props_action
Riley Andrewse4b7b292014-06-16 15:06:21 -0700340
Wei Wangfa14d212018-09-05 10:12:40 -0700341 # Now we can start zygote for devices with file based encryption
342 trigger zygote-start
343
Riley Andrews67cb1ae2014-07-15 20:39:41 -0700344 # Remove a file to wake up anything waiting for firmware.
345 trigger firmware_mounts_complete
346
Riley Andrewse4b7b292014-06-16 15:06:21 -0700347 trigger early-boot
348 trigger boot
349
Colin Cross31712be2010-04-09 12:26:06 -0700350on post-fs
Mark Salyzyn82a395d2017-04-18 08:13:06 -0700351 # Load properties from
352 # /system/build.prop,
353 # /odm/build.prop,
354 # /vendor/build.prop and
355 # /factory/factory.prop
356 load_system_props
Daniel Rosenberg6156b9b2018-10-11 15:35:07 -0700357 start vold
358 exec - system system -- /system/bin/vdc checkpoint markBootAttempt
Steven Morelandd6275022017-03-24 16:23:07 +0000359
Luis Hector Chavez30780a72018-02-14 08:36:16 -0800360 # Once everything is setup, no need to modify /.
Luis Hector Chavezd07d0942018-07-11 08:13:34 -0700361 # The bind+remount combination allows this to work in containers.
362 mount rootfs rootfs / remount bind ro nodev
Jeff Sharkeyf38f29c2015-06-23 14:30:37 -0700363 # Mount default storage into root namespace
Hidehiko Abeec8637e2016-03-09 16:41:50 +0900364 mount none /mnt/runtime/default /storage bind rec
365 mount none none /storage slave rec
Brian Swetland56de7a12010-09-08 15:06:45 -0700366
Nick Kralevich715c4dc2015-12-07 16:57:08 -0800367 # Make sure /sys/kernel/debug (if present) is labeled properly
Paul Lawrencea8d84342016-11-14 15:40:18 -0800368 # Note that tracefs may be mounted under debug, so we need to cross filesystems
369 restorecon --recursive --cross-filesystems /sys/kernel/debug
Paul Lawrenced2abcbd2016-11-02 14:23:31 -0700370
Ken Sumrall752923c2010-12-03 16:33:31 -0800371 # We chown/chmod /cache again so because mount is run as root + defaults
372 chown system cache /cache
373 chmod 0770 /cache
Stephen Smalley1eee4192012-01-13 08:54:34 -0500374 # We restorecon /cache in case the cache partition has been reset.
Nick Kraleviche1695912014-07-09 12:39:21 -0700375 restorecon_recursive /cache
Ken Sumrall752923c2010-12-03 16:33:31 -0800376
Tao Baoe48aed02015-05-11 14:08:18 -0700377 # Create /cache/recovery in case it's not there. It'll also fix the odd
378 # permissions if created by the recovery system.
379 mkdir /cache/recovery 0770 system cache
Ken Sumrall752923c2010-12-03 16:33:31 -0800380
Christopher Tate63c463f2016-01-28 17:09:42 -0800381 # Backup/restore mechanism uses the cache partition
382 mkdir /cache/backup_stage 0700 system system
383 mkdir /cache/backup 0700 system system
384
Ken Sumrall752923c2010-12-03 16:33:31 -0800385 #change permissions on vmallocinfo so we can grab it from bugreports
386 chown root log /proc/vmallocinfo
387 chmod 0440 /proc/vmallocinfo
388
Dima Zavin94812662012-09-25 14:22:02 -0700389 chown root log /proc/slabinfo
390 chmod 0440 /proc/slabinfo
391
Ken Sumrall752923c2010-12-03 16:33:31 -0800392 #change permissions on kmsg & sysrq-trigger so bugreports can grab kthread stacks
393 chown root system /proc/kmsg
394 chmod 0440 /proc/kmsg
395 chown root system /proc/sysrq-trigger
396 chmod 0220 /proc/sysrq-trigger
Colin Crossb35e36e2012-08-02 18:14:33 -0700397 chown system log /proc/last_kmsg
398 chmod 0440 /proc/last_kmsg
Ken Sumrall752923c2010-12-03 16:33:31 -0800399
dcashman5822a4a2014-03-25 16:31:07 -0700400 # make the selinux kernel policy world-readable
401 chmod 0444 /sys/fs/selinux/policy
402
Ken Sumrall752923c2010-12-03 16:33:31 -0800403 # create the lost+found directories, so as to enforce our permissions
Chia-chi Yehea744142011-07-08 16:52:18 -0700404 mkdir /cache/lost+found 0770 root root
Ken Sumrall752923c2010-12-03 16:33:31 -0800405
Paul Crowleyfe305ab2018-05-17 10:12:34 -0700406 restorecon_recursive /metadata
407 mkdir /metadata/vold
408 chmod 0700 /metadata/vold
409
Janis Danisevskis1ad8d212017-04-06 12:44:59 -0700410on late-fs
Joel Galensond48c4cf2017-06-13 10:15:05 -0700411 # Ensure that tracefs has the correct permissions.
412 # This does not work correctly if it is called in post-fs.
413 chmod 0755 /sys/kernel/debug/tracing
414
Janis Danisevskis1ad8d212017-04-06 12:44:59 -0700415 # HALs required before storage encryption can get unlocked (FBE/FDE)
416 class_start early_hal
417
Ken Sumrall752923c2010-12-03 16:33:31 -0800418on post-fs-data
Paul Lawrenceb920cb42018-10-04 08:37:17 -0700419 # Start checkpoint before we touch data
420 start vold
421 exec - system system -- /system/bin/vdc checkpoint prepareCheckpoint
422
Colin Cross31712be2010-04-09 12:26:06 -0700423 # We chown/chmod /data again so because mount is run as root + defaults
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800424 chown system system /data
425 chmod 0771 /data
Stephen Smalley1eee4192012-01-13 08:54:34 -0500426 # We restorecon /data in case the userdata partition has been reset.
427 restorecon /data
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800428
Elliott Hughes2f74a5d2016-02-02 09:15:59 -0800429 # Make sure we have the device encryption key.
Paul Lawrence806d10b2015-04-28 22:07:10 +0000430 installkey /data
431
Yongqin Liua197ff12014-12-05 13:45:02 +0800432 # Start bootcharting as soon as possible after the data partition is
433 # mounted to collect more data.
434 mkdir /data/bootchart 0755 shell shell
Elliott Hughesa3641af2016-11-10 17:43:47 -0800435 bootchart start
Yongqin Liua197ff12014-12-05 13:45:02 +0800436
Martijn Coenen3848e1b2018-08-17 13:52:25 +0200437 # Start apexd as soon as we can
438 start apexd
439
Nick Kralevichb410eb12013-09-17 16:18:23 -0700440 # Avoid predictable entropy pool. Carry over entropy from previous boot.
441 copy /data/system/entropy.dat /dev/urandom
442
Ken Sumrall752923c2010-12-03 16:33:31 -0800443 # create basic filesystem structure
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800444 mkdir /data/misc 01771 system misc
Mark Salyzyn93394032017-07-14 10:37:57 -0700445 mkdir /data/misc/recovery 0770 system log
Siqi Linb9b76de2017-07-26 13:18:15 -0700446 copy /data/misc/recovery/ro.build.fingerprint /data/misc/recovery/ro.build.fingerprint.1
447 chmod 0440 /data/misc/recovery/ro.build.fingerprint.1
448 chown system log /data/misc/recovery/ro.build.fingerprint.1
449 write /data/misc/recovery/ro.build.fingerprint ${ro.build.fingerprint}
450 chmod 0440 /data/misc/recovery/ro.build.fingerprint
451 chown system log /data/misc/recovery/ro.build.fingerprint
Mark Salyzyn93394032017-07-14 10:37:57 -0700452 mkdir /data/misc/recovery/proc 0770 system log
453 copy /data/misc/recovery/proc/version /data/misc/recovery/proc/version.1
454 chmod 0440 /data/misc/recovery/proc/version.1
455 chown system log /data/misc/recovery/proc/version.1
456 copy /proc/version /data/misc/recovery/proc/version
457 chmod 0440 /data/misc/recovery/proc/version
458 chown system log /data/misc/recovery/proc/version
Ajay Panicker604208e2016-09-20 11:52:14 -0700459 mkdir /data/misc/bluedroid 02770 bluetooth bluetooth
Pavlin Radoslavov8175bb22015-06-19 19:12:46 -0700460 # Fix the access permissions and group ownership for 'bt_config.conf'
461 chmod 0660 /data/misc/bluedroid/bt_config.conf
Ajay Panicker604208e2016-09-20 11:52:14 -0700462 chown bluetooth bluetooth /data/misc/bluedroid/bt_config.conf
463 mkdir /data/misc/bluetooth 0770 bluetooth bluetooth
464 mkdir /data/misc/bluetooth/logs 0770 bluetooth bluetooth
Chia-chi Yeh9b4f1ff2009-09-18 10:35:26 +0800465 mkdir /data/misc/keystore 0700 keystore keystore
Andres Morales6a49c2f2015-04-16 13:16:24 -0700466 mkdir /data/misc/gatekeeper 0700 system system
Brian Carlstrom04918932011-06-30 22:50:29 -0700467 mkdir /data/misc/keychain 0771 system system
Sreeram Ramachandranb46efdb2014-07-07 22:09:54 -0700468 mkdir /data/misc/net 0750 root shell
Robert Greenwalt2aa33a32013-07-16 09:46:17 -0700469 mkdir /data/misc/radio 0770 system radio
Robert Greenwaltd6d47802012-09-26 16:04:27 -0700470 mkdir /data/misc/sms 0770 system radio
fionaxu06b8e2e2017-11-21 12:31:57 -0800471 mkdir /data/misc/carrierid 0770 system radio
Niklas Lindgrenfd665382018-05-21 16:53:00 +0200472 mkdir /data/misc/apns 0770 system radio
Elliott Hughesf820e852012-10-19 18:10:05 -0700473 mkdir /data/misc/zoneinfo 0775 system system
Ricky Wai88d5dcb2017-10-27 16:35:35 +0100474 mkdir /data/misc/network_watchlist 0774 system system
Abodunrinwa Tokid6ab6452017-04-27 18:46:59 +0100475 mkdir /data/misc/textclassifier 0771 system system
Chia-chi Yeh9bb4d412011-07-08 20:03:03 -0700476 mkdir /data/misc/vpn 0770 system vpn
Torne (Richard Coles)234f6962014-05-22 18:40:21 +0100477 mkdir /data/misc/shared_relro 0771 shared_relro shared_relro
Oscar Montemayord0aa32c2010-01-06 13:18:12 -0800478 mkdir /data/misc/systemkeys 0700 system system
Mike Lockwood48d116e2009-07-08 18:42:08 -0400479 mkdir /data/misc/wifi 0770 wifi wifi
Stephen Smalley82e87ed2014-01-29 13:53:03 -0500480 mkdir /data/misc/wifi/sockets 0770 wifi wifi
Stephen Smalley82e87ed2014-01-29 13:53:03 -0500481 mkdir /data/misc/wifi/wpa_supplicant 0770 wifi wifi
Jaewan Kim373d9fa2014-03-10 17:13:07 +0900482 mkdir /data/misc/ethernet 0770 system system
Stephen Smalley82e87ed2014-01-29 13:53:03 -0500483 mkdir /data/misc/dhcp 0770 dhcp dhcp
Robin Lee3094f822014-04-25 15:21:35 +0100484 mkdir /data/misc/user 0771 root root
Dehao Chenac725c12015-05-05 15:05:39 -0700485 mkdir /data/misc/perfprofd 0775 root root
Stephen Smalley82e87ed2014-01-29 13:53:03 -0500486 # give system access to wpa_supplicant.conf for backup and restore
Amith Yamasanieefef322009-07-02 12:08:13 -0700487 chmod 0660 /data/misc/wifi/wpa_supplicant.conf
Chia-chi Yeh5ebced32012-03-07 14:52:10 -0800488 mkdir /data/local 0751 root root
Glenn Kastenb0f908a2013-02-22 14:54:45 -0800489 mkdir /data/misc/media 0700 media media
Glenn Kasten845a4ff2016-02-23 15:23:46 -0800490 mkdir /data/misc/audioserver 0700 audioserver audioserver
Keun Soo Yimbe54c542016-03-01 12:45:27 -0800491 mkdir /data/misc/cameraserver 0700 cameraserver cameraserver
Paul Crowleyf8a6fa52015-06-03 13:33:43 +0100492 mkdir /data/misc/vold 0700 root root
Yasuhiro Matsudaf93db4b2015-06-15 18:49:35 +0900493 mkdir /data/misc/boottrace 0771 system shell
David Zeuthen15914782015-10-07 14:00:55 -0400494 mkdir /data/misc/update_engine 0700 root root
Tianjie Xu74fa3ca2017-11-03 10:59:36 -0700495 mkdir /data/misc/update_engine_log 02750 root log
Calin Juravle9b3e5d52015-11-10 19:16:43 +0000496 mkdir /data/misc/trace 0700 root root
Vishnu Naird09ab7a2017-11-27 09:54:31 -0800497 # create location to store surface and window trace files
498 mkdir /data/misc/wmtrace 0700 system system
Calin Juravle807f23a2016-02-01 19:27:01 +0000499 # profile file layout
500 mkdir /data/misc/profiles 0771 system system
501 mkdir /data/misc/profiles/cur 0771 system system
502 mkdir /data/misc/profiles/ref 0771 system system
David Sehr0eb24e12016-05-28 14:10:38 -0700503 mkdir /data/misc/profman 0770 system shell
Ryan Campbell0b364732017-02-21 17:27:02 -0800504 mkdir /data/misc/gcov 0770 root root
Stephen Smalleydeb41e52013-10-01 09:21:47 -0400505
Anton Hanssonc38a6362018-10-24 15:29:16 +0100506 mkdir /data/preloads 0775 system system
507
Jeff Vander Stoep61efb0d2017-03-23 09:23:50 -0700508 mkdir /data/vendor 0771 root root
Andreas Hubera03134e2018-01-22 12:14:51 -0800509 mkdir /data/vendor_ce 0771 root root
510 mkdir /data/vendor_de 0771 root root
Jeff Vander Stoep61efb0d2017-03-23 09:23:50 -0700511 mkdir /data/vendor/hardware 0771 root root
512
Nick Kralevichf3ef1272012-03-14 15:22:54 -0700513 # For security reasons, /data/local/tmp should always be empty.
514 # Do not place files or directories in /data/local/tmp
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800515 mkdir /data/local/tmp 0771 shell shell
Max Bires181d11c2018-01-18 14:23:51 -0800516 mkdir /data/local/traces 0777 shell shell
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800517 mkdir /data/data 0771 system system
518 mkdir /data/app-private 0771 system system
Todd Kennedy0a273352015-11-23 15:24:13 -0800519 mkdir /data/app-ephemeral 0771 system system
Kenny Rootf8bbaba2012-04-12 15:01:52 -0700520 mkdir /data/app-asec 0700 root root
Kenny Root50544172012-09-08 22:39:25 -0700521 mkdir /data/app-lib 0771 system system
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800522 mkdir /data/app 0771 system system
523 mkdir /data/property 0700 root root
Nick Kralevich0359d772015-01-30 17:38:06 -0800524 mkdir /data/tombstones 0771 system system
xshu9a7a5b62017-12-18 11:26:06 -0800525 mkdir /data/vendor/tombstones 0771 root root
526 mkdir /data/vendor/tombstones/wifi 0771 wifi wifi
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800527
Chia-chi Yehea744142011-07-08 16:52:18 -0700528 # create dalvik-cache, so as to enforce our permissions
Alex Light3878ebd2014-08-27 15:40:05 -0700529 mkdir /data/dalvik-cache 0771 root root
Andreas Gampe7dfcc922015-12-08 09:33:07 -0800530 # create the A/B OTA directory, so as to enforce our permissions
531 mkdir /data/ota 0771 root root
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800532
Tao Bao380d6b12016-05-25 16:41:08 -0700533 # create the OTA package directory. It will be accessed by GmsCore (cache
534 # group), update_engine and update_verifier.
535 mkdir /data/ota_package 0770 system cache
536
MÃ¥rten Kongstadb45280d2011-05-30 10:24:54 +0200537 # create resource-cache and double-check the perms
538 mkdir /data/resource-cache 0771 system system
539 chown system system /data/resource-cache
540 chmod 0771 /data/resource-cache
541
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800542 # create the lost+found directories, so as to enforce our permissions
Chia-chi Yehea744142011-07-08 16:52:18 -0700543 mkdir /data/lost+found 0770 root root
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800544
James Dong09cdc0e2012-01-06 15:19:26 -0800545 # create directory for DRM plug-ins - give drm the read/write access to
546 # the following directory.
547 mkdir /data/drm 0770 drm drm
aimitakeshie572d592010-07-27 08:38:35 +0900548
Jeff Tinker08d64302013-04-23 19:54:17 -0700549 # create directory for MediaDrm plug-ins - give drm the read/write access to
550 # the following directory.
551 mkdir /data/mediadrm 0770 mediadrm mediadrm
552
Nick Kralevichc2ea70a2015-07-25 21:06:20 -0700553 mkdir /data/anr 0775 system system
Nick Kralevich89252ce2014-10-20 21:53:56 -0700554
Narayan Kamath8464d792019-01-04 16:40:56 +0000555 mkdir /data/apex 0750 root system
Dario Freni22cdf962018-12-20 14:31:32 +0000556 mkdir /data/staging 0750 system system
Martijn Coenen344a91a2018-10-02 16:43:16 +0200557
Tom Cherryc3193102017-11-21 10:40:25 -0800558 # NFC: create data/nfc for nv storage
559 mkdir /data/nfc 0770 nfc nfc
560 mkdir /data/nfc/param 0770 nfc nfc
561
Paul Lawrencec410b3b2015-03-26 15:49:42 +0000562 # Create all remaining /data root dirs so that they are made through init
563 # and get proper encryption policy installed
564 mkdir /data/backup 0700 system system
Paul Lawrencec410b3b2015-03-26 15:49:42 +0000565 mkdir /data/ss 0700 system system
Jeff Sharkey11705862015-11-09 17:07:35 -0800566
Paul Lawrencec410b3b2015-03-26 15:49:42 +0000567 mkdir /data/system 0775 system system
Jeff Vander Stoep148dea72018-04-16 16:04:38 -0700568 mkdir /data/system/dropbox 0700 system system
Nick Kralevich9c0437f2015-04-07 16:44:08 -0700569 mkdir /data/system/heapdump 0700 system system
Jeff Sharkeyc9b84a32016-04-14 21:09:34 -0600570 mkdir /data/system/users 0775 system system
Jeff Sharkey3b9c83a2016-02-03 14:44:44 -0700571
572 mkdir /data/system_de 0770 system system
Jeff Sharkey11705862015-11-09 17:07:35 -0800573 mkdir /data/system_ce 0770 system system
Jeff Sharkey3b9c83a2016-02-03 14:44:44 -0700574
575 mkdir /data/misc_de 01771 system misc
576 mkdir /data/misc_ce 01771 system misc
Jeff Sharkey11705862015-11-09 17:07:35 -0800577
Paul Lawrencec410b3b2015-03-26 15:49:42 +0000578 mkdir /data/user 0711 system system
Jeff Sharkey11705862015-11-09 17:07:35 -0800579 mkdir /data/user_de 0711 system system
Jeff Sharkey3b9c83a2016-02-03 14:44:44 -0700580 symlink /data/data /data/user/0
Paul Lawrencec410b3b2015-03-26 15:49:42 +0000581
Jeff Sharkeyd78b55f2016-01-13 09:37:08 -0700582 mkdir /data/media 0770 media_rw media_rw
Jeff Sharkeyd78b55f2016-01-13 09:37:08 -0700583 mkdir /data/media/obb 0770 media_rw media_rw
584
Yueyao (Nathan) Zhu60c6dac2016-06-21 12:04:54 -0700585 mkdir /data/cache 0770 system cache
586 mkdir /data/cache/recovery 0770 system cache
587 mkdir /data/cache/backup_stage 0700 system system
588 mkdir /data/cache/backup 0700 system system
589
Paul Crowley59497452016-02-01 16:37:13 +0000590 init_user0
591
Stephen Smalleyf2b7ee72014-02-06 13:52:52 -0500592 # Set SELinux security contexts on upgrade or policy update.
Paul Lawrencea8d84342016-11-14 15:40:18 -0800593 restorecon --recursive --skip-ce /data
Stephen Smalleyf2b7ee72014-02-06 13:52:52 -0500594
Neil Fullerc71a48b2018-12-09 14:44:53 +0000595 # Check any timezone data in /data is newer than the copy in the runtime module, delete if not.
596 exec - system system -- /system/bin/tzdatacheck /apex/com.android.runtime/etc/tz /data/misc/zoneinfo
Neil Fuller08913222015-03-31 18:24:29 +0100597
Jiyong Park25990882019-01-02 23:37:15 +0900598 # Wait for apexd to finish activating APEXes before starting more processes.
599 # This certainly reduces the parallelism but is required to make as many processes
600 # as possible to use the bionic libs from the runtime APEX. This takes less than 50ms
601 # so the impact on the booting time is not significant.
602 wait_for_prop apexd.status ready
603 setup_runtime_bionic
604 parse_apex_configs
605
Steven Morelandf38aab42017-01-25 10:52:15 -0800606 # If there is no post-fs-data action in the init.<device>.rc file, you
Ken Sumrall752923c2010-12-03 16:33:31 -0800607 # must uncomment this line, otherwise encrypted filesystems
608 # won't work.
609 # Set indication (checked by vold) that we have finished this action
610 #setprop vold.post_fs_data_done 1
611
Wei Wang53842e72017-04-20 14:37:55 -0700612# It is recommended to put unnecessary data/ initialization from post-fs-data
613# to start-zygote in device's init.rc to unblock zygote start.
614on zygote-start && property:ro.crypto.state=unencrypted
615 # A/B update verifier that marks a successful boot.
616 exec_start update_verifier_nonencrypted
617 start netd
618 start zygote
619 start zygote_secondary
620
621on zygote-start && property:ro.crypto.state=unsupported
622 # A/B update verifier that marks a successful boot.
623 exec_start update_verifier_nonencrypted
624 start netd
625 start zygote
626 start zygote_secondary
627
Wei Wangbae9ba32017-03-09 12:35:02 -0800628on zygote-start && property:ro.crypto.state=encrypted && property:ro.crypto.type=file
Wei Wang53842e72017-04-20 14:37:55 -0700629 # A/B update verifier that marks a successful boot.
630 exec_start update_verifier_nonencrypted
631 start netd
632 start zygote
633 start zygote_secondary
Wei Wangbae9ba32017-03-09 12:35:02 -0800634
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800635on boot
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700636 # basic network init
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800637 ifup lo
638 hostname localhost
639 domainname localdomain
640
Benedict Wong00308f82018-03-12 19:00:50 -0700641 # IPsec SA default expiration length
642 write /proc/sys/net/core/xfrm_acq_expires 3600
643
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700644 # Memory management. Basic kernel parameters, and allow the high
645 # level system server to be able to adjust the kernel OOM driver
646 # parameters to match how it is managing things.
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800647 write /proc/sys/vm/overcommit_memory 1
The Android Open Source Projecte037fd72009-03-13 13:04:37 -0700648 write /proc/sys/vm/min_free_order_shift 4
Dianne Hackborn06787f42011-08-07 16:30:24 -0700649 chown root system /sys/module/lowmemorykiller/parameters/adj
Daniel Cardenas429e7422015-03-20 00:07:57 +0000650 chmod 0664 /sys/module/lowmemorykiller/parameters/adj
Dianne Hackborn06787f42011-08-07 16:30:24 -0700651 chown root system /sys/module/lowmemorykiller/parameters/minfree
Daniel Cardenas429e7422015-03-20 00:07:57 +0000652 chmod 0664 /sys/module/lowmemorykiller/parameters/minfree
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800653
San Mehat831d8e12009-10-13 12:24:47 -0700654 # Tweak background writeout
655 write /proc/sys/vm/dirty_expire_centisecs 200
656 write /proc/sys/vm/dirty_background_ratio 5
657
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800658 # Permissions for System Server and daemons.
659 chown radio system /sys/android_power/state
660 chown radio system /sys/android_power/request_state
661 chown radio system /sys/android_power/acquire_full_wake_lock
662 chown radio system /sys/android_power/acquire_partial_wake_lock
663 chown radio system /sys/android_power/release_wake_lock
Arve Hjønnevåg70a163f2012-05-02 17:57:50 -0700664 chown system system /sys/power/autosleep
Arve Hjønnevåg1670f832012-03-20 20:33:09 -0700665 chown system system /sys/power/state
666 chown system system /sys/power/wakeup_count
Pavlin Radoslavov0eca1072015-11-23 17:18:31 -0800667 chown radio wakelock /sys/power/wake_lock
668 chown radio wakelock /sys/power/wake_unlock
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800669 chmod 0660 /sys/power/state
670 chmod 0660 /sys/power/wake_lock
671 chmod 0660 /sys/power/wake_unlock
Todd Poynor0653b972012-04-11 14:48:51 -0700672
673 chown system system /sys/devices/system/cpu/cpufreq/interactive/timer_rate
674 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/timer_rate
Todd Poynor2b5b3bb2012-12-20 18:52:03 -0800675 chown system system /sys/devices/system/cpu/cpufreq/interactive/timer_slack
676 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/timer_slack
Todd Poynor0653b972012-04-11 14:48:51 -0700677 chown system system /sys/devices/system/cpu/cpufreq/interactive/min_sample_time
678 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/min_sample_time
679 chown system system /sys/devices/system/cpu/cpufreq/interactive/hispeed_freq
680 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/hispeed_freq
Todd Poynor2b5b3bb2012-12-20 18:52:03 -0800681 chown system system /sys/devices/system/cpu/cpufreq/interactive/target_loads
682 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/target_loads
Todd Poynor0653b972012-04-11 14:48:51 -0700683 chown system system /sys/devices/system/cpu/cpufreq/interactive/go_hispeed_load
684 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/go_hispeed_load
Todd Poynorf35c2032012-04-19 13:17:24 -0700685 chown system system /sys/devices/system/cpu/cpufreq/interactive/above_hispeed_delay
686 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/above_hispeed_delay
Todd Poynor8d3ea1d2012-04-24 15:37:13 -0700687 chown system system /sys/devices/system/cpu/cpufreq/interactive/boost
688 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/boost
Todd Poynor4ff10e62012-05-03 15:20:48 -0700689 chown system system /sys/devices/system/cpu/cpufreq/interactive/boostpulse
Todd Poynor33045a62012-04-27 20:21:18 -0700690 chown system system /sys/devices/system/cpu/cpufreq/interactive/input_boost
691 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/input_boost
Todd Poynor4f247d72012-12-19 17:43:06 -0800692 chown system system /sys/devices/system/cpu/cpufreq/interactive/boostpulse_duration
693 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/boostpulse_duration
Todd Poynor6b5de1c2013-03-25 13:17:13 -0700694 chown system system /sys/devices/system/cpu/cpufreq/interactive/io_is_busy
695 chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/io_is_busy
Todd Poynor0653b972012-04-11 14:48:51 -0700696
697 # Assume SMP uses shared cpufreq policy for all CPUs
698 chown system system /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
699 chmod 0660 /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
700
David Lin27b2c1e2017-03-08 17:36:18 -0800701 chown system system /sys/class/leds/vibrator/trigger
702 chown system system /sys/class/leds/vibrator/activate
703 chown system system /sys/class/leds/vibrator/brightness
704 chown system system /sys/class/leds/vibrator/duration
705 chown system system /sys/class/leds/vibrator/state
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800706 chown system system /sys/class/timed_output/vibrator/enable
707 chown system system /sys/class/leds/keyboard-backlight/brightness
708 chown system system /sys/class/leds/lcd-backlight/brightness
709 chown system system /sys/class/leds/button-backlight/brightness
The Android Open Source Projectf614d642009-03-18 17:39:49 -0700710 chown system system /sys/class/leds/jogball-backlight/brightness
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800711 chown system system /sys/class/leds/red/brightness
712 chown system system /sys/class/leds/green/brightness
713 chown system system /sys/class/leds/blue/brightness
714 chown system system /sys/class/leds/red/device/grpfreq
715 chown system system /sys/class/leds/red/device/grppwm
716 chown system system /sys/class/leds/red/device/blink
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800717 chown system system /sys/module/sco/parameters/disable_esco
718 chown system system /sys/kernel/ipv4/tcp_wmem_min
719 chown system system /sys/kernel/ipv4/tcp_wmem_def
720 chown system system /sys/kernel/ipv4/tcp_wmem_max
721 chown system system /sys/kernel/ipv4/tcp_rmem_min
722 chown system system /sys/kernel/ipv4/tcp_rmem_def
723 chown system system /sys/kernel/ipv4/tcp_rmem_max
724 chown root radio /proc/cmdline
725
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700726 # Define default initial receive window size in segments.
JP Abgrall7c862c82014-02-21 12:05:01 -0800727 setprop net.tcp.default_init_rwnd 60
728
Steven Morelandd6275022017-03-24 16:23:07 +0000729 # Start standard binderized HAL daemons
730 class_start hal
731
Ken Sumrall752923c2010-12-03 16:33:31 -0800732 class_start core
Ken Sumrall752923c2010-12-03 16:33:31 -0800733
734on nonencrypted
Paul Lawrence13d5bb42014-01-30 10:43:52 -0800735 class_start main
Ken Sumrall752923c2010-12-03 16:33:31 -0800736 class_start late_start
737
Riley Andrews1bbef882014-06-26 13:55:03 -0700738on property:sys.init_log_level=*
739 loglevel ${sys.init_log_level}
740
Dima Zavinca47cef2011-08-24 15:28:23 -0700741on charger
742 class_start charger
743
Ken Sumrall752923c2010-12-03 16:33:31 -0800744on property:vold.decrypt=trigger_reset_main
745 class_reset main
746
Ken Sumrallc5c51032011-03-08 17:01:29 -0800747on property:vold.decrypt=trigger_load_persist_props
748 load_persist_props
Mark Salyzyn5c39e0a2015-04-20 08:55:02 -0700749 start logd
Mark Salyzyn48d06062015-03-11 14:45:05 -0700750 start logd-reinit
Ken Sumrallc5c51032011-03-08 17:01:29 -0800751
Ken Sumrall752923c2010-12-03 16:33:31 -0800752on property:vold.decrypt=trigger_post_fs_data
753 trigger post-fs-data
Paul Lawrence7fdcbdf2018-04-13 12:28:42 -0700754 trigger zygote-start
Ken Sumrall752923c2010-12-03 16:33:31 -0800755
Ken Sumralle4349152011-01-17 14:26:34 -0800756on property:vold.decrypt=trigger_restart_min_framework
Tao Bao97df3952015-12-04 17:45:43 -0800757 # A/B update verifier that marks a successful boot.
Tom Cherryaaeb7922017-03-28 13:28:38 -0700758 exec_start update_verifier
Ken Sumralle4349152011-01-17 14:26:34 -0800759 class_start main
760
Ken Sumrall752923c2010-12-03 16:33:31 -0800761on property:vold.decrypt=trigger_restart_framework
Tao Bao97df3952015-12-04 17:45:43 -0800762 # A/B update verifier that marks a successful boot.
Tom Cherryaaeb7922017-03-28 13:28:38 -0700763 exec_start update_verifier
Ken Sumrall752923c2010-12-03 16:33:31 -0800764 class_start main
765 class_start late_start
Isaac Leef32c2012018-07-26 17:07:25 +0800766 setprop service.bootanim.exit 0
767 start bootanim
Ken Sumrall752923c2010-12-03 16:33:31 -0800768
769on property:vold.decrypt=trigger_shutdown_framework
770 class_reset late_start
771 class_reset main
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800772
Elliott Hughesa3641af2016-11-10 17:43:47 -0800773on property:sys.boot_completed=1
774 bootchart stop
775
JP Abgrall7c862c82014-02-21 12:05:01 -0800776# system server cannot write to /proc/sys files,
777# and chown/chmod does not work for /proc/sys/ entries.
778# So proxy writes through init.
Colin Cross57fdb5c2013-07-25 10:34:30 -0700779on property:sys.sysctl.extra_free_kbytes=*
780 write /proc/sys/vm/extra_free_kbytes ${sys.sysctl.extra_free_kbytes}
Riley Andrews6dfdc7c2014-06-18 20:35:40 -0700781
JP Abgrall7c862c82014-02-21 12:05:01 -0800782# "tcp_default_init_rwnd" Is too long!
783on property:sys.sysctl.tcp_def_init_rwnd=*
784 write /proc/sys/net/ipv4/tcp_default_init_rwnd ${sys.sysctl.tcp_def_init_rwnd}
785
Daniel Micay2b22a662015-09-04 16:23:01 -0400786on property:security.perf_harden=0
787 write /proc/sys/kernel/perf_event_paranoid 1
Yabin Cui4f0da7c2018-06-29 14:52:47 -0700788 write /proc/sys/kernel/perf_event_max_sample_rate ${debug.perf_event_max_sample_rate:-100000}
789 write /proc/sys/kernel/perf_cpu_time_max_percent ${debug.perf_cpu_time_max_percent:-25}
790 write /proc/sys/kernel/perf_event_mlock_kb ${debug.perf_event_mlock_kb:-516}
Daniel Micay2b22a662015-09-04 16:23:01 -0400791
792on property:security.perf_harden=1
793 write /proc/sys/kernel/perf_event_paranoid 3
Colin Cross57fdb5c2013-07-25 10:34:30 -0700794
Wei Wangeeab4912017-06-27 22:08:45 -0700795# on shutdown
796# In device's init.rc, this trigger can be used to do device-specific actions
797# before shutdown. e.g disable watchdog and mask error handling
798
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800799## Daemon processes to be run by init.
800##
Tom Cherry31438482018-07-20 14:57:00 -0700801service ueventd /system/bin/ueventd
Ken Sumrall752923c2010-12-03 16:33:31 -0800802 class core
Colin Crossf83d0b92010-04-21 12:04:20 -0700803 critical
Stephen Smalley1eee4192012-01-13 08:54:34 -0500804 seclabel u:r:ueventd:s0
Keun-young Parkcccb34f2017-07-05 11:38:44 -0700805 shutdown critical
Colin Crossf83d0b92010-04-21 12:04:20 -0700806
Brian Swetlandb4d65392010-10-27 15:40:23 -0700807service console /system/bin/sh
Ken Sumrall752923c2010-12-03 16:33:31 -0800808 class core
Brian Swetlandb4d65392010-10-27 15:40:23 -0700809 console
810 disabled
811 user shell
Nick Kralevichc39ba5a2015-11-07 16:52:17 -0800812 group shell log readproc
Stephen Smalley610653f2013-12-23 14:11:02 -0500813 seclabel u:r:shell:s0
Dmitry Shmidtd0fb2512017-10-11 11:18:51 -0700814 setenv HOSTNAME console
Brian Swetlandb4d65392010-10-27 15:40:23 -0700815
Mike Lockwoodd49b4ef2010-11-19 09:12:27 -0500816on property:ro.debuggable=1
Calin Juravle9b3e5d52015-11-10 19:16:43 +0000817 # Give writes to anyone for the trace folder on debug builds.
818 # The folder is used to store method traces.
819 chmod 0773 /data/misc/trace
Vishnu Naird09ab7a2017-11-27 09:54:31 -0800820 # Give reads to anyone for the window trace folder on debug builds.
821 chmod 0775 /data/misc/wmtrace
Brian Swetlandb4d65392010-10-27 15:40:23 -0700822 start console
823
Doug Zongker95262022014-02-04 12:15:14 -0800824service flash_recovery /system/bin/install-recovery.sh
Ken Sumrall752923c2010-12-03 16:33:31 -0800825 class main
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800826 oneshot