Lines Matching refs:recovery

1 # recovery console (used in recovery init.rc for /sbin/recovery)
5 type recovery, domain, domain_deprecated;
7 # But the allow rules are only included in the recovery policy.
8 # Otherwise recovery is only allowed the domain rules.
10 …allow recovery self:capability { chown dac_override fowner fsetid setfcap setuid setgid sys_admin …
13   allow recovery self:capability2 mac_admin;
16   allow recovery rootfs:file execute_no_trans;
17   allow recovery system_file:file execute_no_trans;
18   allow recovery toolbox_exec:file rx_file_perms;
21   allow recovery rootfs:dir mounton;
22   allow recovery fs_type:filesystem ~relabelto;
23   allow recovery unlabeled:filesystem ~relabelto;
24   allow recovery contextmount_type:filesystem relabelto;
27   allow recovery exec_type:{ file lnk_file } { create_file_perms relabelfrom relabelto };
28   allow recovery system_file:{ file lnk_file } { create_file_perms relabelfrom relabelto };
29   allow recovery system_file:dir { create_dir_perms relabelfrom relabelto };
33   allow recovery unlabeled:{ file lnk_file } { create_file_perms relabelfrom relabelto };
34   allow recovery unlabeled:dir { create_dir_perms relabelfrom relabelto };
42   allow recovery exec_type:dir { create_dir_perms relabelfrom relabelto };
45   allow recovery proc_drop_caches:file w_file_perms;
49   allow recovery sysfs:file w_file_perms;
51   allow recovery sysfs_batteryinfo:file r_file_perms;
53   allow recovery kernel:system syslog_read;
56   allow recovery adb_device:chr_file rw_file_perms;
57   allow recovery functionfs:dir search;
58   allow recovery functionfs:file rw_file_perms;
61   allow recovery device:dir r_dir_perms;
62   allow recovery block_device:dir r_dir_perms;
63   allow recovery dev_type:blk_file rw_file_perms;
66   allow recovery self:process execmem;
67   allow recovery ashmem_device:chr_file execute;
68   allow recovery graphics_device:chr_file rw_file_perms;
69   allow recovery graphics_device:dir r_dir_perms;
70   allow recovery input_device:dir r_dir_perms;
71   allow recovery input_device:chr_file r_file_perms;
72   allow recovery tty_device:chr_file rw_file_perms;
74   # Create /tmp/recovery.log and execute /tmp/update_binary.
75   allow recovery tmpfs:file { create_file_perms x_file_perms };
76   allow recovery tmpfs:dir create_dir_perms;
78   # Manage files on /cache and /cache/recovery
79   allow recovery { cache_file cache_recovery_file }:dir create_dir_perms;
80   allow recovery { cache_file cache_recovery_file }:file create_file_perms;
83   r_dir_file(recovery, oemfs);
86   set_prop(recovery, powerctl_prop)
89   set_prop(recovery, ctl_default_prop)
92   allow recovery self:process setfscreate;
94   # Allow recovery to create a fuse filesystem, and read files from it.
95   allow recovery fuse_device:chr_file rw_file_perms;
96   allow recovery fuse:dir r_dir_perms;
97   allow recovery fuse:file r_file_perms;
99   wakelock_use(recovery)
103   allow recovery kernel:process setsched;
113 # to recovery anyway.
117 # domains, including recovery.
120 neverallow recovery data_file_type:file { no_w_file_perms no_x_file_perms };
121 neverallow recovery data_file_type:dir no_w_dir_perms;