Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit cd66e4c6 authored by Treehugger Robot's avatar Treehugger Robot Committed by Gerrit Code Review
Browse files

Merge "init.rc: Perform some mounts with nodev,nosuid,noexec"

parents 1cb765c8 f8a7e37b

rootdir/init.rc

+8 −8
Original line number Original line Diff line number Diff line
@@ -28,12 +28,12 @@ on early-init 
    restorecon /postinstall

    restorecon /postinstall





    # Mount cgroup mount point for cpu accounting

    # Mount cgroup mount point for cpu accounting

    mount cgroup none /acct cpuacct

    mount cgroup none /acct nodev noexec nosuid cpuacct

    mkdir /acct/uid

    mkdir /acct/uid





    # root memory control cgroup, used by lmkd

    # root memory control cgroup, used by lmkd

    mkdir /dev/memcg 0700 root system

    mkdir /dev/memcg 0700 root system

    mount cgroup none /dev/memcg memory

    mount cgroup none /dev/memcg nodev noexec nosuid memory

    # app mem cgroups, used by activity manager, lmkd and zygote

    # app mem cgroups, used by activity manager, lmkd and zygote

    mkdir /dev/memcg/apps/ 0755 system system

    mkdir /dev/memcg/apps/ 0755 system system

    # cgroup for system_server and surfaceflinger

    # cgroup for system_server and surfaceflinger
@@ -59,7 +59,7 @@ on init 




    # Create energy-aware scheduler tuning nodes

    # Create energy-aware scheduler tuning nodes

    mkdir /dev/stune

    mkdir /dev/stune

    mount cgroup none /dev/stune schedtune

    mount cgroup none /dev/stune nodev noexec nosuid schedtune

    mkdir /dev/stune/foreground

    mkdir /dev/stune/foreground

    mkdir /dev/stune/background

    mkdir /dev/stune/background

    mkdir /dev/stune/top-app

    mkdir /dev/stune/top-app
@@ -155,7 +155,7 @@ on init 




    # Create cgroup mount points for process groups

    # Create cgroup mount points for process groups

    mkdir /dev/cpuctl

    mkdir /dev/cpuctl

    mount cgroup none /dev/cpuctl cpu

    mount cgroup none /dev/cpuctl nodev noexec nosuid cpu

    chown system system /dev/cpuctl

    chown system system /dev/cpuctl

    chown system system /dev/cpuctl/tasks

    chown system system /dev/cpuctl/tasks

    chmod 0666 /dev/cpuctl/tasks

    chmod 0666 /dev/cpuctl/tasks
@@ -164,7 +164,7 @@ on init 




    # sets up initial cpusets for ActivityManager

    # sets up initial cpusets for ActivityManager

    mkdir /dev/cpuset

    mkdir /dev/cpuset

    mount cpuset none /dev/cpuset

    mount cpuset none /dev/cpuset nodev noexec nosuid





    # this ensures that the cpusets are present and usable, but the device's

    # this ensures that the cpusets are present and usable, but the device's

    # init.rc must actually set the correct cpus

    # init.rc must actually set the correct cpus
@@ -219,17 +219,17 @@ on init 
    chmod 0644 /dev/xt_qtaguid

    chmod 0644 /dev/xt_qtaguid





    mkdir /dev/cg2_bpf

    mkdir /dev/cg2_bpf

    mount cgroup2 cg2_bpf /dev/cg2_bpf

    mount cgroup2 cg2_bpf /dev/cg2_bpf nodev noexec nosuid

    chown root root /dev/cg2_bpf

    chown root root /dev/cg2_bpf

    chmod 0600 /dev/cg2_bpf

    chmod 0600 /dev/cg2_bpf

    mount bpf bpf /sys/fs/bpf

    mount bpf bpf /sys/fs/bpf nodev noexec nosuid





    # Create location for fs_mgr to store abbreviated output from filesystem

    # Create location for fs_mgr to store abbreviated output from filesystem

    # checker programs.

    # checker programs.

    mkdir /dev/fscklogs 0770 root system

    mkdir /dev/fscklogs 0770 root system





    # pstore/ramoops previous console log

    # pstore/ramoops previous console log

    mount pstore pstore /sys/fs/pstore

    mount pstore pstore /sys/fs/pstore nodev noexec nosuid

    chown system log /sys/fs/pstore/console-ramoops

    chown system log /sys/fs/pstore/console-ramoops

    chmod 0440 /sys/fs/pstore/console-ramoops

    chmod 0440 /sys/fs/pstore/console-ramoops

    chown system log /sys/fs/pstore/console-ramoops-0

    chown system log /sys/fs/pstore/console-ramoops-0