| Alex Klyubin | f5446eb | 2017-03-23 14:27:32 -0700 | [diff] [blame] | 1 | typeattribute init coredomain; |
| 2 | |
| dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 3 | tmpfs_domain(init) |
| 4 | |
| 5 | # Transitions to seclabel processes in init.rc |
| Sandeep Patil | dc08245 | 2016-11-01 13:49:10 -0700 | [diff] [blame] | 6 | domain_trans(init, rootfs, charger) |
| Sandeep Patil | 137a13d | 2016-12-15 12:36:45 -0800 | [diff] [blame] | 7 | domain_trans(init, rootfs, healthd) |
| dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 8 | domain_trans(init, rootfs, slideshow) |
| Jin Qian | 4de505b | 2017-05-02 13:45:08 -0700 | [diff] [blame] | 9 | domain_auto_trans(init, e2fs_exec, e2fs) |
| dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 10 | recovery_only(` |
| Bowgo Tsai | 5846c79 | 2017-07-31 18:38:28 +0800 | [diff] [blame] | 11 | domain_trans(init, rootfs, adbd) |
| Jerry Zhang | 1d85efa | 2018-05-29 10:54:16 -0700 | [diff] [blame] | 12 | domain_trans(init, rootfs, fastbootd) |
| dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 13 | domain_trans(init, rootfs, recovery) |
| 14 | ') |
| 15 | domain_trans(init, shell_exec, shell) |
| 16 | domain_trans(init, init_exec, ueventd) |
| Tom Cherry | 621c24c | 2017-09-28 14:34:36 -0700 | [diff] [blame] | 17 | domain_trans(init, init_exec, vendor_init) |
| Sandeep Patil | e41af20 | 2017-06-02 16:09:26 -0700 | [diff] [blame] | 18 | domain_trans(init, { rootfs toolbox_exec }, modprobe) |
| dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 19 | userdebug_or_eng(` |
| Tom Cherry | 938ab05 | 2018-08-03 10:49:20 -0700 | [diff] [blame] | 20 | # case where logpersistd is actually logcat -f in logd context (nee: logcatd) |
| Mark Salyzyn | da62cb4 | 2016-08-10 11:10:02 -0700 | [diff] [blame] | 21 | domain_auto_trans(init, logcat_exec, logpersist) |
| Tom Cherry | 938ab05 | 2018-08-03 10:49:20 -0700 | [diff] [blame] | 22 | |
| 23 | # allow init to execute services marked with seclabel u:r:su:s0 in userdebug/eng |
| 24 | allow init su:process transition; |
| 25 | dontaudit init su:process noatsecure; |
| 26 | allow init su:process { siginh rlimitinh }; |
| dcashman | cc39f63 | 2016-07-22 13:13:11 -0700 | [diff] [blame] | 27 | ') |
| Branden Archer | d36b1d5 | 2018-11-27 15:47:12 -0800 | [diff] [blame] | 28 | |
| 29 | # Allow the BoringSSL self test to request a reboot upon failure |
| 30 | set_prop(init, powerctl_prop) |