blob: 568e0d360eb53aa2da45e854bae7a753ab0bf5ae [file] [log] [blame]
Dan Cashman91d398d2017-09-26 12:58:29 -07001typeattribute init coredomain;
2
3tmpfs_domain(init)
4
5# Transitions to seclabel processes in init.rc
6domain_trans(init, rootfs, adbd)
7domain_trans(init, rootfs, charger)
8domain_trans(init, rootfs, healthd)
9domain_trans(init, rootfs, slideshow)
10recovery_only(`
11 domain_trans(init, rootfs, recovery)
12')
13domain_trans(init, shell_exec, shell)
14domain_trans(init, init_exec, ueventd)
15domain_trans(init, init_exec, watchdogd)
16domain_trans(init, { rootfs toolbox_exec }, modprobe)
17# case where logpersistd is actually logcat -f in logd context (nee: logcatd)
18userdebug_or_eng(`
19 domain_auto_trans(init, logcat_exec, logpersist)
20')
21
22# Creating files on sysfs is impossible so this isn't a threat
23# Sometimes we have to write to non-existent files to avoid conditional
24# init behavior. See b/35303861 for an example.
25dontaudit init sysfs:dir write;