Lines Matching full:recovery
0 # recovery console (used in recovery init.rc for /sbin/recovery)
5 type recovery, domain, domain_deprecated;
7 # But the allow rules are only included in the recovery policy.
8 # Otherwise recovery is only allowed the domain rules.
10 # Allow recovery to perform an update as update_engine would do.
11 typeattribute recovery update_engine_common, boot_control_hal;
13 allow recovery self:capability { chown dac_override fowner fsetid setfcap setuid setgid sys_admin sys_tty_config };
16 allow recovery self:capability2 mac_admin;
19 allow recovery rootfs:file execute_no_trans;
20 allow recovery system_file:file execute_no_trans;
21 allow recovery toolbox_exec:file rx_file_perms;
24 allow recovery rootfs:dir mounton;
25 allow recovery fs_type:filesystem ~relabelto;
26 allow recovery unlabeled:filesystem ~relabelto;
27 allow recovery contextmount_type:filesystem relabelto;
30 allow recovery exec_type:{ file lnk_file } { create_file_perms relabelfrom relabelto };
31 allow recovery system_file:{ file lnk_file } { create_file_perms relabelfrom relabelto };
32 allow recovery system_file:dir { create_dir_perms relabelfrom relabelto };
36 allow recovery unlabeled:{ file lnk_file } { create_file_perms relabelfrom relabelto };
37 allow recovery unlabeled:dir { create_dir_perms relabelfrom relabelto };
45 allow recovery exec_type:dir { create_dir_perms relabelfrom relabelto };
48 allow recovery proc_drop_caches:file w_file_perms;
52 allow recovery sysfs:file w_file_perms;
54 allow recovery sysfs_batteryinfo:file r_file_perms;
56 allow recovery kernel:system syslog_read;
59 allow recovery adb_device:chr_file rw_file_perms;
60 allow recovery functionfs:dir search;
61 allow recovery functionfs:file rw_file_perms;
64 allow recovery device:dir r_dir_perms;
65 allow recovery block_device:dir r_dir_perms;
66 allow recovery dev_type:blk_file rw_file_perms;
69 allow recovery self:process execmem;
70 allow recovery ashmem_device:chr_file execute;
71 allow recovery graphics_device:chr_file rw_file_perms;
72 allow recovery graphics_device:dir r_dir_perms;
73 allow recovery input_device:dir r_dir_perms;
74 allow recovery input_device:chr_file r_file_perms;
75 allow recovery tty_device:chr_file rw_file_perms;
77 # Create /tmp/recovery.log and execute /tmp/update_binary.
78 allow recovery tmpfs:file { create_file_perms x_file_perms };
79 allow recovery tmpfs:dir create_dir_perms;
81 # Manage files on /cache and /cache/recovery
82 allow recovery { cache_file cache_recovery_file }:dir create_dir_perms;
83 allow recovery { cache_file cache_recovery_file }:file create_file_perms;
86 r_dir_file(recovery, oemfs);
89 set_prop(recovery, powerctl_prop)
92 set_prop(recovery, ctl_default_prop)
95 allow recovery self:process setfscreate;
97 # Allow recovery to create a fuse filesystem, and read files from it.
98 allow recovery fuse_device:chr_file rw_file_perms;
99 allow recovery fuse:dir r_dir_perms;
100 allow recovery fuse:file r_file_perms;
102 wakelock_use(recovery)
106 allow recovery kernel:process setsched;
113 # Recovery should never touch /data.
116 # to recovery anyway.
120 # domains, including recovery.
123 neverallow recovery data_file_type:file { no_w_file_perms no_x_file_perms };
124 neverallow recovery data_file_type:dir no_w_dir_perms;
