2017-03-23 14:27:32 -07:00
|
|
|
typeattribute init coredomain;
|
|
|
|
|
2016-07-22 13:13:11 -07:00
|
|
|
tmpfs_domain(init)
|
|
|
|
|
|
|
|
# Transitions to seclabel processes in init.rc
|
2016-12-15 12:36:45 -08:00
|
|
|
domain_trans(init, rootfs, healthd)
|
2016-07-22 13:13:11 -07:00
|
|
|
domain_trans(init, rootfs, slideshow)
|
2018-09-07 15:05:33 -07:00
|
|
|
domain_auto_trans(init, charger_exec, charger)
|
2017-05-02 13:45:08 -07:00
|
|
|
domain_auto_trans(init, e2fs_exec, e2fs)
|
2018-11-29 13:07:40 -08:00
|
|
|
domain_auto_trans(init, bpfloader_exec, bpfloader)
|
|
|
|
|
2016-07-22 13:13:11 -07:00
|
|
|
recovery_only(`
|
2018-09-07 15:05:33 -07:00
|
|
|
# Files in recovery image are labeled as rootfs.
|
2017-07-31 03:38:28 -07:00
|
|
|
domain_trans(init, rootfs, adbd)
|
2018-09-07 15:05:33 -07:00
|
|
|
domain_trans(init, rootfs, charger)
|
2018-05-29 10:54:16 -07:00
|
|
|
domain_trans(init, rootfs, fastbootd)
|
2016-07-22 13:13:11 -07:00
|
|
|
domain_trans(init, rootfs, recovery)
|
|
|
|
')
|
|
|
|
domain_trans(init, shell_exec, shell)
|
|
|
|
domain_trans(init, init_exec, ueventd)
|
2017-09-28 14:34:36 -07:00
|
|
|
domain_trans(init, init_exec, vendor_init)
|
2017-06-02 16:09:26 -07:00
|
|
|
domain_trans(init, { rootfs toolbox_exec }, modprobe)
|
2016-07-22 13:13:11 -07:00
|
|
|
userdebug_or_eng(`
|
2018-08-03 10:49:20 -07:00
|
|
|
# case where logpersistd is actually logcat -f in logd context (nee: logcatd)
|
2016-08-10 11:10:02 -07:00
|
|
|
domain_auto_trans(init, logcat_exec, logpersist)
|
2018-08-03 10:49:20 -07:00
|
|
|
|
|
|
|
# allow init to execute services marked with seclabel u:r:su:s0 in userdebug/eng
|
|
|
|
allow init su:process transition;
|
|
|
|
dontaudit init su:process noatsecure;
|
|
|
|
allow init su:process { siginh rlimitinh };
|
2016-07-22 13:13:11 -07:00
|
|
|
')
|
2018-11-27 15:47:12 -08:00
|
|
|
|
|
|
|
# Allow the BoringSSL self test to request a reboot upon failure
|
|
|
|
set_prop(init, powerctl_prop)
|