summaryrefslogtreecommitdiffstats
path: root/init
Commit message (Collapse)AuthorAgeFilesLines
...
* | | Merge "Document the mount option string in the readme.txt"Elliott Hughes2015-03-151-2/+4
|\ \ \
| * | | Document the mount option string in the readme.txtNiklas Tibbling2015-03-151-2/+4
| |/ / | | | | | | | | | | | | | | | also make a distinction between flag and option. Change-Id: Ia872bc8dc98b3459f9c1e992d096c115699357af
* | | Create libbase.Dan Albert2015-03-144-17/+16
|/ / | | | | | | | | | | | | Move StringPrintf and the string based file I/O from libutils to libbase. Change-Id: I0297a6063874b9d92100e0dd5123fddfbda932fe
* | Remove obsolete setkey.Elliott Hughes2015-03-134-29/+0
| | | | | | | | | | | | It's undocumented and unused. Change-Id: I685dc900adbc14f2e8b4eeebb1e4d111782f141d
* | Remove getsebool/setsebool from init and toolbox.Stephen Smalley2015-03-134-35/+0
| | | | | | | | | | | | | | | | | | These were leftovers from the SELinux boolean support that was originally merged. Since Android prohibits SELinux policy booleans, we can just drop it. Change-Id: I02f646a7d8db65e153702205b082b87a73f60d73 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
* | builtins: remove setenforce commandNick Kralevich2015-03-114-16/+0
| | | | | | | | | | | | | | | | Adding "setenforce 0" to init.rc isn't a supported way to turn off SELinux, and doesn't work with AOSP SELinux policy. Remove the code from init. Change-Id: If8c8149560789c9a7ba518a0a100e6033bb68898
* | Fix a printf format string (caught by clang but not GCC).Elliott Hughes2015-03-111-1/+1
| | | | | | | | Change-Id: I665756615eef74b05ef92f5865d910f29ead0695
* | Merge "Implement exec."Elliott Hughes2015-03-1110-173/+391
|\ \
| * | Implement exec.Elliott Hughes2015-02-2510-173/+391
| | | | | | | | | | | | Change-Id: I20329bc9b378479d745b498d6a00eca0872cd5ab
* | | Fix outdated comments in grab-bootchart.sh.Elliott Hughes2015-03-061-7/+4
| | | | | | | | | | | | | | | | | | | | | I've been deliberately vague about the name of the readme because I want to come back and switch to markdown, but that probably won't happen today. Change-Id: I60651703709bbfd499227f882eb949396e8f4f6c
* | | Merge "Add init support for dm-verity logging mode"Sami Tolvanen2015-03-043-0/+19
|\ \ \ | |/ / |/| |
| * | Add init support for dm-verity logging modeSami Tolvanen2015-03-043-0/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add a built-in command for loading verity state. If dm-verity will be started in logging mode, trigger verity-logging. Needs changes from Ibb82953594d234f81ad21c40f524190b88e4ac8f Change-Id: I5af4918f2f14fdd4d07f51c55837e08111fd3748
* | | init: grab-bootchart.sh: run bootchart and display resultsMark Salyzyn2015-02-242-5/+7
|/ / | | | | | | | | | | | | | | | | - KISS as all options are now passed to adb for better or worse - runs bootchart and immediately displays the results Bug: 19485335 Bug: 18390773 Change-Id: Id32930031371d0368e605810f0c998232a1d4f16
* | Move sprintf to snprintf.Yabin Cui2015-02-173-4/+4
| | | | | | | | | | Bug: 19340053 Change-Id: Id0d866e6195ed4752b4be6081eeb2aab8b1dbe9a
* | Remove unused variable BOOTCHART_DEFAULT_TIME_SEC.Elliott Hughes2015-02-131-3/+0
| | | | | | | | Change-Id: Id43c73dd32d2f9f1eee9592b55aa3fd3c02094b2
* | Further refactoring of the bootchart code.Elliott Hughes2015-02-135-368/+187
| | | | | | | | Change-Id: Ifed6ae8d481b605139fd27799574de4c2d0f5908
* | bootchart: fix bootchart can not be triggered problemYongqin Liu2015-02-127-111/+102
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | bootchart uses a file on the data partition to decide if it should collect data for bootchart, but the data partition will be mounted by the mount_all command in the "on fs" section, and it will be only added into the action queue when command "trigger fs" is executed, but that's after the bootchart_init action (late_init). This change makes bootchart_init a builtin command of init, and make it executed as the first command of "on post-fs" section which will be triggered after the "on fs" section. This change also refactors the bootchart code to all be in bootchart.cpp. Change-Id: Ia74aa34ca5b785f51fcffdd383075a549b2a99d9 Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
* | Bump do_write buffer sizeJohan Redestig2015-02-071-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In the case of do_write (write to generic file) there is really no relation to the PROP_VALUE_MAX limitation of system properties. The current value, 92, is not so much for writing to files so bump it a bit. Ideally there should not be any low hard limit in this case. Either expand_props should allocate the output buffer or take the output fd and to streaming write. Such a change is rather invasive though and at this point in time it seems reasonable that one dont want more than 256 character strings in the init files. Change-Id: I846a282ae4e747e6171eef38b302b46287951451
* | Clean up reading and writing in init.Elliott Hughes2015-02-0611-149/+184
| | | | | | | | | | | | | | | | | | | | | | | | | | This isn't particularly useful in and of itself, but it does introduce the first (trivial) unit test, improves the documentation (including details about how to debug init crashes), and made me aware of how unpleasant the existing parser is. I also fixed a bug in passing --- unless you thought the "peboot" and "pm" commands were features... Bug: 19217569 Change-Id: I6ab76129a543ce3ed3dab52ef2c638009874c3de
* | Stop using #if for conditional compilation.Elliott Hughes2015-02-0411-185/+162
| | | | | | | | | | | | | | | | Use regular 'if' to prevent bitrot. Also remove remaining typedefs. Change-Id: I2e6ca928e2db29b88b643cf990ff05cfb0be94a6
* | Use TEMP_FAILURE_RETRY, always build bootchart.cpp.Elliott Hughes2015-02-046-70/+25
| | | | | | | | | | | | | | | | Also switch the revision parsing over to sscanf as promised. I haven't done the hardware parsing because I don't yet know whether we actually need to keep the space-stripping code. Change-Id: Ic33378345cd515cb08d00c543acf44eb72673396
* | Fix clang "ueventd.cpp:111:1: error: no return statement in function ↵Elliott Hughes2015-02-041-0/+2
| | | | | | | | | | | | returning non-void". Change-Id: I69c9e5534975bffa0fbf98ca4af50400f6b94aa0
* | Build init as C++.Elliott Hughes2015-02-0420-146/+101
| | | | | | | | | | | | This is just the minimal change to keep it building. Change-Id: I245c5b8413a1db114576c81462eb5737f5ffcef2
* | Fix x86_64 buildDmitriy Ivanov2015-02-031-2/+2
| | | | | | | | Change-Id: Iaa3a641907de55b398a3bdd0bbc63cbb9d367982
* | Merge "Init: Fix Clang unsupported attributes"Elliott Hughes2015-02-031-0/+6
|\ \
| * | Init: Fix Clang unsupported attributesAndreas Gampe2015-02-031-0/+6
| | | | | | | | | | | | | | | | | | Make attributes conditional on not compiling with Clang. Change-Id: Ic4e9b382308651c7b1901bfa192b6591672dc5ab
* | | Init: Fix literalAndreas Gampe2015-02-031-1/+1
|/ / | | | | | | | | | | This is a literal 0 implicitly converted to a NULL. Change-Id: I0573e85eb0578f938877c4bec79054081c27e661
* | Trivial cleanup of recent changes.Elliott Hughes2015-02-023-6/+9
| | | | | | | | | | | | | | A typo in the documentation for one, and a couple of signed/unsigned warnings in the implementation of the other. Change-Id: I8fb4b7448ac901c543dea7420aabcedf13ec1bd8
* | init: Implement 'exec' command.San Mehat2015-02-026-4/+74
| | | | | | | | | | | | (cherry-pick of d05ab3952ec0e38f33a0e80ce6b9eb45b0064ba4.) Change-Id: Id6d9bb32e51a0ad090ed8240cc505dc45b57b35d
* | init: Add support "&&" operator in property triggersBadhri Jagan Sridharan2015-02-025-56/+128
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | "&&" operator can now be used to test the validity of two of more properties. For example: on property:test.a=1 && property:test.b=1 setprop test.c 1 The above stub sets the test.c to 1 only when both test.a=1 and test.b=1 (cherry-pick of 162f7d797c67019a7a3f08c3b0f0ffc91d548ddc.) Change-Id: I72c19f7aa92231372a416193618ee6c7fd368141 Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
* | Add O_CLOEXEC to lots of open() calls.Nick Kralevich2015-02-028-44/+31
| | | | | | | | | | | | and other related fixups. Change-Id: Ia88fb37a07ff6777d00c49800081f5a519c0c78d
* | builtins.c: Don't require file open() for chmod/chownNick Kralevich2015-02-021-63/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 42a9349dc4e98019d27d7f8d19bc6c431695d7e1 modified init's builtin chmod, chown, and mkdir calls to avoid following symlinks. This addressed a number of attacks we were seeing at the time where poorly written init scripts were following attacker supplied symlinks resulting in rooting vulnerabilities. To avoid race conditions, the previous implementation only ran fchown / fchmod on file descriptors opened with open(O_NOFOLLOW). Unfortunately, unlike the normal "chown" or "chmod" calls, this requires read or write access to the underlying file. This isn't ideal, as opening some files may have side effects, or init may not have permission to open certain files (such as when SELinux is enabled). Instead of using open(O_NOFOLLOW) + fchown(), use lchown() instead. As before, the target of the symlink won't be modified by chown. This also supports setting the ownership of symlinks. Instead of using open(O_NOFOLLOW) + fchmod(), use fchmodat(AT_SYMLINK_NOFOLLOW) instead. As before, the target of the symlink won't be modified by chmod. This change will continue to ensure that chown/chmod/mkdir doesn't follow symlinks, without requiring init to open every file in read-only or read-write mode. This change depends on bionic commit I1eba0cdb2c509d9193ceecf28f13118188a3cfa7 Addresses the following mako/occam SELinux denial: audit(1422770408.951:6): avc: denied { write } for pid=1 comm="init" name="smd7" dev="tmpfs" ino=7207 scontext=u:r:init:s0 tcontext=u:object_r:radio_device:s0 tclass=chr_file Change-Id: I14fde956784d65c44e7aa91dd7eea9a004df3081
* | Add missing includes.Elliott Hughes2015-01-292-0/+2
| | | | | | | | Change-Id: Iaa130c0a7eb2cbc0c8486546e5b622661b6d9e23
* | Enable clang for init, after fix of global .mk files.Chih-Hung Hsieh2015-01-221-4/+0
| | | | | | | | | | | | | | | | | | | | LOCAL_FORCE_STATIC_EXECUTABLE was not working properly for clang because -Bstatic was ignored by clang. We can now enable clang for init after the -static flag is added to link static executable files in build/core/definitions.mk. BUG: 18008984 Change-Id: I3f361b83c1e0b313914603dff33fd090cd3b116a
* | property_service: Added vendor build properties to load_all_propsAndres Morales2015-01-131-0/+1
| | | | | | | | Change-Id: Id50a6dd7fd40752efff8a327ea6b4a45b07fc1b2
* | Move property_context label handling to libselinux.dcashman2014-12-101-20/+0
| | | | | | | | | | | | Resubmission of commit: dab91bd37af6be355163ee33ca6f1b00e7dd1b51 Change-Id: Iad9517d3f81f7c091307b3e7497675e2cdc32be5
* | Revert "Move property_context label handling to libselinux."Nick Kralevich2014-12-101-0/+20
| | | | | | | | | | | | | | | | | | Emulator fails to boot. This reverts commit 98069027bd90d2139d54affa1367dcd3317a1c11. Bug: 18692152 Change-Id: If362e1311bc3f07e033ba81190c05608ada7c361
* | Move property_context label handling to libselinux.dcashman2014-12-031-20/+0
| | | | | | | | Change-Id: I76e2ed95d4e4f8618458e63d30ae82e37d1acf7b
* | Init: Remove unused variablesAndreas Gampe2014-11-246-30/+9
| | | | | | | | | | | | | | | | For build-system CFLAGS clean-up, fix unused variables. Use a #define instead of static variable in a header file. Change-Id: Id47bf38e51644b61a9f3ac1893a16553695f1aac
* | Use LOCAL_POST_INSTALL_CMD to simplify symlink creation.Ying Wang2014-11-241-20/+4
| | | | | | | | Change-Id: I67ad7248c26561d394e66901e90ef5814ec69fb3
* | Fix segfault in get_character_device_symlinks()Tomasz Kondel2014-11-131-1/+1
| | | | | | | | | | | | A segmentation fault will occur when strchr function returns NULL. Change-Id: I76076acfff16056179bf24dff5df9f81d9a45125
* | Close fd on error path in do_mount()Tomasz Kondel2014-11-131-0/+1
| | | | | | | | | | | | | | This fix closes a file descriptor before returning error from do_mount() Change-Id: Ib370229f16bf9ac385162d6b163cc5b079a1e73e
* | property_service: Added vendor build properties to load_all_propsDaniel Rosenberg2014-11-111-0/+1
| | | | | | | | | | Change-Id: I267bd848e1f6e2978024c07e603b25f1f41f5fbf Signed-off-by: Daniel Rosenberg <drosen@google.com>
* | init isn't built for platforms without dirent::d_type.Elliott Hughes2014-11-101-2/+0
| | | | | | | | Change-Id: Icd4b431576f2ba619ff4ae6fb871bb0210d3b2f2
* | am 2d241ec8: am 3a387176: Merge "Don\'t build init with clang for now"Chih-hung Hsieh2014-10-161-0/+4
|\ \ | | | | | | | | | | | | * commit '2d241ec8a86c56bbf8522eb007674d7b4e3d164d': Don't build init with clang for now
| * | Don't build init with clang for nowBernhard Rosenkraenzer2014-10-041-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | init doesn't start when built with clang. Set LOCAL_CLANG:=false until this is analyzed and fixed. Change-Id: I5a7944aef676ce88defe5c0449e712d9812fb5f3 Signed-off-by: Bernhard Rosenkraenzer <Bernhard.Rosenkranzer@linaro.org>
* | | am 2b16bf88: Merge "Include reason when wiping data." into lmp-devJeff Sharkey2014-09-241-1/+2
|\ \ \ | | |/ | |/| | | | | | | * commit '2b16bf88c768003291f027fdfac94d84abe9dbe6': Include reason when wiping data.
| * | Include reason when wiping data.Jeff Sharkey2014-09-241-1/+2
| | | | | | | | | | | | | | | | | | | | | This will help us track down who requested a data wipe. Bug: 17412160 Change-Id: I40f73d2d0f08123d2afc044a3dde485151b400d9
* | | am ae3a8961: am fed0f06b: Merge "init: Fix memory corruption when sanitizing ↵Elliott Hughes2014-09-231-2/+2
|\ \ \ | | |/ | |/| | | | | | | | | | | | | platform paths" * commit 'ae3a8961f01e436a70cab569483b8ebcc1f56c0c': init: Fix memory corruption when sanitizing platform paths
| * | init: Fix memory corruption when sanitizing platform pathsChristopher R. Palmer2014-09-221-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit fixes code that incorrectly increments s when it hits the terminator character of the string being sanitized. This means it will randomly start trashing memory beyond the end of the string being sanitized until it happens to hit two NULs (\0\0) which will break it out of the loop. Change-Id: I76553d7f183236a78a0bc7b408e92559b98f732f
generated by cgit v1.1 at 2025-03-31 08:45:28 +0000