Searched refs:recovery (Results 1 – 25 of 33) sorted by relevance
12
| /system/sepolicy/public/ |
| D | recovery.te | 1 # recovery console (used in recovery init.rc for /sbin/recovery)
5 type recovery, domain;
7 # But the allow rules are only included in the recovery policy.
8 # Otherwise recovery is only allowed the domain rules.
10 # Allow recovery to perform an update as update_engine would do.
11 typeattribute recovery update_engine_common;
13 passthrough_hal_client_domain(recovery, hal_bootctl)
15 …allow recovery self:capability { chown dac_override fowner fsetid setfcap setuid setgid sys_admin …
18 allow recovery self:capability2 mac_admin;
21 allow recovery rootfs:file execute_no_trans;
[all …]
|
| D | install_recovery.te | 7 # /system/bin/install-recovery.sh is a shell script.
17 # Update the recovery block device based off a diff of the boot block device
|
| D | uncrypt.te | 15 # Read /cache/recovery/command
16 # Read /cache/recovery/uncrypt_file
|
| D | postinstall.te | 33 # No domain other than update_engine and recovery (via update_engine_sideload)
36 neverallow { domain -update_engine -recovery } postinstall:process { transition dyntransition };
|
| D | update_engine_common.te | 2 # background daemon and the recovery tool to sideload an update.
11 # Allow to set recovery options in the BCB. Used to trigger factory reset when
|
| D | domain.te | 234 # Do not allow any domain other than init or recovery to create unlabeled files.
235 neverallow { domain -init -recovery } unlabeled:dir_file_class_set create;
252 -recovery
265 # Only recovery needs mac_admin to set contexts not defined in current policy.
266 neverallow { domain -recovery } self:capability2 mac_admin;
328 neverallow { domain -kernel -init -recovery } block_device:blk_file { open read write };
342 neverallow { domain -kernel -init -recovery -vold -zygote -update_engine -otapreopt_chroot } { fs_t…
369 -recovery # for /tmp/update_binary in tmpfs
394 # Only recovery should be doing writes to /system & /vendor
397 -recovery
[all …]
|
| D | recovery_persist.te | 1 # android recovery persistent log manager
|
| D | recovery_refresh.te | 1 # android recovery refresh log manager
|
| D | dumpstate.te | 154 # Access /cache/recovery
158 # Access /data/misc/recovery
|
| D | device.te | 102 # The 'misc' partition used by recovery and A/B.
|
| /system/sepolicy/ |
| D | CleanSpec.mk | 52 $(call add-clean-step, rm -rf $(PRODUCT_OUT)/recovery/root/file_contexts)
55 $(call add-clean-step, rm -rf $(PRODUCT_OUT)/recovery/root/service_contexts)
57 $(call add-clean-step, rm -rf $(PRODUCT_OUT)/recovery/root/nonplat_property_contexts)
59 $(call add-clean-step, rm -rf $(PRODUCT_OUT)/recovery/root/plat_property_contexts)
62 $(call add-clean-step, rm -rf $(PRODUCT_OUT)/recovery/root/property_contexts)
65 $(call add-clean-step, rm -rf $(PRODUCT_OUT)/recovery/root/property_contexts)
|
| D | Android.mk | 534 LOCAL_MODULE := sepolicy.recovery
542 sepolicy.recovery.conf := $(intermediates)/sepolicy.recovery.conf
543 $(sepolicy.recovery.conf): PRIVATE_MLS_SENS := $(MLS_SENS)
544 $(sepolicy.recovery.conf): PRIVATE_MLS_CATS := $(MLS_CATS)
545 $(sepolicy.recovery.conf): PRIVATE_TGT_ARCH := $(my_target_arch)
546 $(sepolicy.recovery.conf): PRIVATE_TGT_WITH_ASAN := $(with_asan)
547 $(sepolicy.recovery.conf): PRIVATE_ADDITIONAL_M4DEFS := $(LOCAL_ADDITIONAL_M4DEFS)
548 $(sepolicy.recovery.conf): $(call build_policy, $(sepolicy_build_files), \
562 $(LOCAL_BUILT_MODULE): $(sepolicy.recovery.conf) $(HOST_OUT_EXECUTABLES)/checkpolicy \
576 sepolicy.recovery.conf :=
[all …]
|
| /system/sepolicy/private/ |
| D | recovery.te | 1 typeattribute recovery coredomain;
2 typeattribute recovery domain_deprecated;
|
| D | init.te | 11 domain_trans(init, rootfs, recovery)
|
| D | technical_debt.cil | 6 ; NOTE: This file has no effect on recovery policy.
|
| D | file_contexts | 220 /system/bin/recovery-persist u:object_r:recovery_persist_exec:s0
221 /system/bin/recovery-refresh u:object_r:recovery_refresh_exec:s0
242 /system/bin/install-recovery.sh u:object_r:install_recovery_exec:s0
369 /data/misc/recovery(/.*)? u:object_r:recovery_data_file:s0
438 /cache/recovery(/.*)? u:object_r:cache_recovery_file:s0
445 /data/cache/recovery(/.*)? u:object_r:cache_recovery_file:s0
|
| D | service_contexts | 126 recovery u:object_r:recovery_service:s0
|
| /system/update_engine/ |
| D | hardware_android.cc | 69 memcpy(boot.recovery, in WriteBootloaderRecoveryMessage()
71 std::min(message.size(), sizeof(boot.recovery) - 1)); in WriteBootloaderRecoveryMessage()
84 offsetof(bootloader_message, recovery) + sizeof(boot.recovery); in WriteBootloaderRecoveryMessage()
|
| D | Android.mk | 216 bootable/recovery
282 bootable/recovery
390 bootable/recovery
482 bootable/recovery
|
| /system/extras/boot_control_copy/ |
| D | Android.mk | 8 LOCAL_C_INCLUDES := system/core/mkbootimg bootable/recovery
|
| /system/core/libsync/ |
| D | Android.bp | 29 // libsync_recovery is only intended for the recovery binary.
|
| /system/core/ |
| D | CleanSpec.mk | 55 $(call add-clean-step, rm -rf $(PRODUCT_OUT)/recovery/root/default.prop)
|
| /system/core/healthd/ |
| D | Android.mk | 49 LOCAL_C_INCLUDES := bootable/recovery $(LOCAL_PATH)/include
|
| /system/core/rootdir/ |
| D | init.rc | 324 # Create /cache/recovery in case it's not there. It'll also fix the odd
325 # permissions if created by the recovery system.
326 mkdir /cache/recovery 0770 system cache
485 mkdir /data/cache/recovery 0770 system cache
703 service flash_recovery /system/bin/install-recovery.sh
|
| /system/core/adb/ |
| D | OVERVIEW.TXT | 44 devices when they are in the bootloader or recovery mode.
|
12