| Commit message (Collapse) | Author | Age | Files | Lines |
| ... | |
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
If we fail to set a crypto policy on a system-DE directory, this is a
serious and unrecoverable condition; the only way forward is to erase
the entire device. In a future commit we will also allow users the
option of booting again.
Bug: 28318405
Change-Id: Iff1e52c5bbee1beed29dc4b609d24bfeb7d138da
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Switch insmod from using init_module to finit_module. From
"man finit_module":
The finit_module() system call is like init_module(), but reads the
module to be loaded from the file descriptor fd. It is useful when the
authenticity of a kernel module can be determined from its location in
the file system; in cases where that is possible, the overhead of
using cryptographically signed modules to determine the authenticity
of a module can be avoided.
finit_module is preferred over init_module because it allows LSMs, such
as SELinux, to perform a permission check on kernel module loads based on
the file from which the module is loaded. This functionality is not yet
implemented in the Linux kernel, but is on the SEAndroid TODO list.
See https://bitbucket.org/seandroid/wiki/wiki/ToDo
Bug: 27824855
(cherry picked from commit 124a9c97e9815142a33480b81a5a3041a7cd66bd)
Change-Id: I5e87de1a7b8c3d8849bf757c71b08e81c378b021
|
| |\| |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
am: fe5d55a
* commit 'fe5d55a68b9dc3a593d3f6ee5be919b8a9de710c':
Don't start defaultcrypto twice
Change-Id: I0e9a27208ea046a2cf738992ba97141da9026c08
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
The old way (using triggers) starts defaultcrypto twice because
queue_property_triggers_action retriggers the action.
Bug: 27452459
Change-Id: I48c844836f551673d0dbfed6c33bd8ee1e035f40
|
| |\| |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
am: a3a7a88
* commit 'a3a7a886f5277b6223140761e58cea0753854225':
init: write bootloader message directly.
Change-Id: I764e0288b40264b8e48fc09011c3c0475b71a04e
|
| | | |
| | |
| | |
| | |
| | | |
Bug: 27176738
Change-Id: I8c95a193f3436c0893d5103760b700f3052888db
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
(cherry pick from commit a98cc9c202b9ff97df89e2258bf04bc3b8b57301)
Try writing a "0" into:
- /sys/class/leds/lcd-backlight/brightness
- /sys/class/backlight/*/brightness
to turn off the backlight during shutdown cleanup.
Bug: 27506425
Change-Id: Ic8a44dc8909b303f24e14f71cfb43292df60efde
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | | |
(cherry pick from commit ad575e04a1d89f5a2a4e3006a58e801cad9c9805)
Bug: 27506425
Change-Id: I40967068d18ce1a8cbaf0b750e7a7af6eab3e4e8
|
| |\ \ \
| | |/
| |/|
| | |
| | |
| | |
| | |
| | |
| | | |
am: 8cb6a9c
* commit '8cb6a9cdb7cb1feaff29914aa88c68399e32f14f':
init: drop unused header android_filesystem_config.h
Change-Id: I1cc001c883199e8355e97d93a2f6ce0d46bdd767
|
| | | |
| | |
| | |
| | |
| | |
| | | |
Change-Id: I66e637bc2d7fd5f385f40f150becfe515c53c19a
Bug: 27999086
Signed-off-by: William Roberts <william.c.roberts@intel.com>
|
| |\| |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
am: 23702b5
* commit '23702b538b3a02ca35f24c55d406a7cc7b14641f':
init: turn off backlight when performing shutdown cleanup
Change-Id: I249106a3b6c22e77d06bca5aee1d92184b00ba33
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Try writing a "0" into:
- /sys/class/leds/lcd-backlight/brightness
- /sys/class/backlight/*/brightness
to turn off the backlight during shutdown cleanup.
Bug: 27506425
Change-Id: Ic8a44dc8909b303f24e14f71cfb43292df60efde
|
| |\| |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
am: 34dcdd8
* commit '34dcdd8075a0c12de552219d4f326bccd1c8fe62':
init: watchdog restarted during shutdown fsck
Change-Id: I28e3a730f2d854c51f1d760a5400faecd3f1fafc
|
| | | |
| | |
| | |
| | |
| | | |
Bug: 27506425
Change-Id: I40967068d18ce1a8cbaf0b750e7a7af6eab3e4e8
|
| |\| |
| |/
|/|
| |
| |
| |
| |
| |
| | |
am: 699b115
* commit '699b115be3c79547e9cc6d8bca771d77eb384915':
init/builtins.cpp: Switch to finit_module
Change-Id: Iab21b9e058fe9435847ba9bca4cb2d1c0f50c88f
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Switch insmod from using init_module to finit_module. From
"man finit_module":
The finit_module() system call is like init_module(), but reads the
module to be loaded from the file descriptor fd. It is useful when the
authenticity of a kernel module can be determined from its location in
the file system; in cases where that is possible, the overhead of
using cryptographically signed modules to determine the authenticity
of a module can be avoided.
finit_module is preferred over init_module because it allows LSMs, such
as SELinux, to perform a permission check on kernel module loads based on
the file from which the module is loaded. This functionality is not yet
implemented in the Linux kernel, but is on the SEAndroid TODO list.
See https://bitbucket.org/seandroid/wiki/wiki/ToDo
Bug: 27824855
Change-Id: Id0ea88cd1930393c8c73ce38e63d5b2eeadf946a
|
| | |
| |
| |
| |
| |
| |
| | |
Set ro.crypto.state flag to unencrypted and unsupported accordingly
Bug: 18002358
Change-Id: I1f88ce9704c5505d7b63256e2ebe5f8441c79ad0
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This ensures that all users on device follow a consistent path for
setup and validation of encryption policy.
Also add remaining user-specific directories and fix linking order.
Bug: 25796509
Change-Id: I8c2e42a78569817f7f5ea03f54b743a6661fdb9c
|
| | |
| |
| |
| | |
Change-Id: I6d986853929c0237c0d958329b8e9aab47907a00
|
| | |
| |
| |
| |
| |
| |
| | |
Fix ugly special cases for user 0: initialize them explicitly.
Bug: 26704408
Change-Id: I1b8536b9e5e87ea98b4009a309f2e22c56006651
|
| |\ \ |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Changes to the way FBE works to support lifecycles mean that these
commands aren't needed any more.
Bug: 22358539
Change-Id: Id73339e0aa8070dd688f35b5d59de75236961395
|
| |\ \ \
| |/ /
|/| /
| |/
| |
| |
| | |
am: 436a8aa9de
* commit '436a8aa9de9c90a8ee95e02e97bf65e50c80d4f4':
Allow paths of .rc files to be specified at mount_all
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
In current implementation, the mount_all command imports all .rc files
under /{system,vendor,odm}/etc/init/ after mouting filesystems is complete.
There's a need from ODMs to import different .rc files under different boot
modes (e.g., factory mode). Without this support, they will have to fiddle
around the init implementation.
This commit makes mount_all import the .rc files/directories specified
as additional arguments. If no path is given, the original ones are applied
the same way as the current implementation.
BUG: 26549689
Change-Id: Ie67ce13dde4c440ff8bf534826bc392c882a433f
|
| |\|
| |
| |
| |
| |
| |
| | |
am: a8c931b7f5
* commit 'a8c931b7f57c8ce74f520d591e99bb367f91dc81':
init: Allows shutting down cleanly.
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
When ro.build.shutdown_timeout is set, init will send a SIGTERM signal to
all services on reboot. The normal shutdown process will continue once
all services have exited or after the shutdown timeout
(ro.build.shutdown_timeout).
If ro.build.shutdown_timeout is not set, we assume a 0s timeout.
Bug: 26216447
Test: manual: Ask to reboot. All services exit cleanly.
Change-Id: If921f6e8d87211e500ac9fa86f3e1eabe02d18cf
|
| |\|
| |
| |
| |
| |
| |
| | |
am: 42a86f8d1e
* commit '42a86f8d1e918356e86d4eb3fb2444a8c42d25ff':
Set up dm-verity in EIO mode instead of logging mode
|
| | |\ |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
If the device is corrupted, set up dm-verity in EIO mode instead of
logging mode. This prevents corrupted blocks from being returned to
user space. Note that restart mode is used by default and a warning
will be displayed to the user after corruption is first detected.
Bug: 19277516
Change-Id: I38966d73eb814836bc34b4bad1192583e5010b36
|
| |/ /
| |
| |
| |
| |
| | |
Needed so we can make the user0 key on first boot
Change-Id: I4699dbf2efdec44bb09bc4cfa7eeb59e56cb93ab
|
| |/
|
|
| |
Change-Id: Idf9444fece4aa89c93e15640de59a91f6e758ccf
|
| |\
| |
| |
| | |
Change-Id: I747b279bc49f9f82b8f8859c49b3fc2a4e3b4977
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Create a Parser class that uses multiple SectionParser interfaces to
handle parsing the different sections of an init rc.
Create an ActionParser and ServiceParser that implement SectionParser
and parse the sections corresponding to Action and Service
classes.
Remove the legacy keyword structure and replace it with std::map's
that map keyword -> (minimum args, maximum args, function pointer) for
Commands and Service Options.
Create an ImportParser that implements SectionParser and handles the
import 'section'.
Clean up the unsafe memory handling of the Action class by using
std::unique_ptr.
Change-Id: Ic5ea5510cb956dbc3f78745a35096ca7d6da7085
|
| |\|
| |
| |
| |
| |
| |
| | |
systems after mount_all"
* commit '08a6775f8cdadf48e7b5f4f4d710180fda43b2b6':
init: import init rc scripts from file systems after mount_all
|
| | |
| |
| |
| |
| |
| |
| | |
Import /{system,vendor,odm}/etc/init/... after file systems are mounted
Bug: 23186545
Change-Id: Idb0cae9773f904c0330054c8b3e31eb87b2fb7cb
|
| |\|
| |
| |
| |
| | |
* commit 'd1b11a04903be74ba6a47307d8c3ef2731e3f4ab':
Add |opts| argument to android_fork_execvp_ext
|
| | |
| |
| |
| |
| |
| |
| | |
to allow the caller to send data to the child's stdin.
Bug: 21725996
Change-Id: I818f5cf61045286c8d64a91b6d50f05740329be1
|
| |\|
| |
| |
| |
| | |
* commit '4036f5ab2ffbe5a2e47d46aa376e9791385cc31b':
Create Service and ServiceManager classes
|
| | |
| |
| |
| | |
Change-Id: I363a5e4751ad83d2f4096882a6fbbeddca03acfe
|
| |\|
| |
| |
| | |
Change-Id: Ibc802572898b6913c1f5d94aaae19974bfc0eb85
|
| | |\ |
|
| | | |
| | |
| | |
| | | |
Change-Id: Ie7a64e65de3a20d0c7f7d8efc0f7c1ba121d07fe
|
| |\| |
| | |
| | |
| | |
| | | |
* commit '2f9e1db37416cdb580d870218b5fbfbed47a3758':
Stop calling fsck on shutdown by default
|
| | |\ \
| | |/
| |/| |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Instead, run the command only when sys.powerctl is set to
"shutdown,userrequested". This way, we can avoid running
fsck when shutdown is triggered due to a low power state.
This is a follow-up CL for http://r.android.com/158525.
Bug: 21853106
Change-Id: Ie57c23cd25162cc2a8726f876a9ba212080105fb
|
| |\| |
| | |
| | |
| | |
| | | |
* commit 'a21d85620560896bbed0cd43db9ed3224ab4e974':
init: Create classes for Action and Command
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
This creates the concept of 'event_trigger' vs 'property_trigger'
Previously these were merged into one, such that 'on property:a=b &&
property:b=c' is triggered when properties a=b and b=c as expected,
however combinations such as 'on early-boot && boot' would trigger
during both early-boot and boot. Similarly, 'on early-boot &&
property:a=b' would trigger on both early-boot and again when property
a equals b.
The event trigger distinction ensures that the first example fails to
parse and the second example only triggers on early-boot if
property a equals b.
This coalesces Actions with the same triggers into a single Action object
Change-Id: I8f661d96e8a2d40236f252301bfe10979d663ea6
|
| |\| |
| | |
| | |
| | |
| | |
| | |
| | | |
builtins."
* commit 'bd5f10addfba8df40c8293d95c002044acbfa526':
init: do expand_props before calling the builtins.
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Also switch expand_props to std::string.
Bug: 22654233
Change-Id: I62910d4f74e2b1a5bd2b14aea440767a2a8462b7
|
| |\| |
| | |
| | |
| | | |
Change-Id: I7d7a614a5eb987ef6aecd32ed15a6eaa43e93957
|