Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 9b82ce20 authored by Kenny Root's avatar Kenny Root Committed by Gerrit Code Review
Browse files

Merge "Document the SELinux extensions to the Android init language."

parents 3ddc0059 3fb61108
Loading
Loading
Loading
Loading
+26 −0
Original line number Original line Diff line number Diff line
@@ -88,6 +88,13 @@ group <groupname> [ <groupname> ]*
   supplemental groups of the process (via setgroups()).
   supplemental groups of the process (via setgroups()).
   Currently defaults to root.  (??? probably should default to nobody)
   Currently defaults to root.  (??? probably should default to nobody)


seclabel <securitycontext>
  Change to securitycontext before exec'ing this service.
  Primarily for use by services run from the rootfs, e.g. ueventd, adbd.
  Services on the system partition can instead use policy-defined transitions
  based on their file security context.
  If not specified and no transition is defined in policy, defaults to the init context.

oneshot
oneshot
   Do not restart the service when it exits.
   Do not restart the service when it exits.


@@ -182,6 +189,21 @@ mount <type> <device> <dir> [ <mountoption> ]*
   device by name.
   device by name.
   <mountoption>s include "ro", "rw", "remount", "noatime", ...
   <mountoption>s include "ro", "rw", "remount", "noatime", ...


restorecon <path>
   Restore the file named by <path> to the security context specified
   in the file_contexts configuration.
   Not required for directories created by the init.rc as these are
   automatically labeled correctly by init.

setcon <securitycontext>
   Set the current process security context to the specified string.
   This is typically only used from early-init to set the init context
   before any other process is started.

setenforce 0|1
   Set the SELinux system-wide enforcing status.
   0 is permissive (i.e. log but do not deny), 1 is enforcing.

setkey
setkey
   TBD
   TBD


@@ -191,6 +213,10 @@ setprop <name> <value>
setrlimit <resource> <cur> <max>
setrlimit <resource> <cur> <max>
   Set the rlimit for a resource.
   Set the rlimit for a resource.


setsebool <name>=<value>
   Set SELinux boolean <name> to <value>.
   <value> may be 1|true|on or 0|false|off

start <service>
start <service>
   Start a service running if it is not already running.
   Start a service running if it is not already running.