10 # setup the global environment
11 export PATH /bin:/sbin:/system/sbin:/system/bin:/system/xbin:/system/xbin/bb:/data/local/bin
12 export LD_LIBRARY_PATH /system/lib
13 export ANDROID_BOOTLOGO 1
14 export ANDROID_ROOT /system
15 export ANDROID_ASSETS /system/app
16 export ANDROID_DATA /data
17 export EXTERNAL_STORAGE /sdcard
18 export ASEC_MOUNTPOINT /mnt/asec
19 export BOOTCLASSPATH /system/framework/core.jar:/system/framework/bouncycastle.jar:/system/framework/ext.jar:/system/framework/framework.jar:/system/framework/android.policy.jar:/system/framework/services.jar:/system/framework/core-junit.jar
21 # Backward compatibility
22 symlink /system/etc /etc
23 symlink /sys/kernel/debug /d
26 mkdir /mnt 0775 root system
27 mkdir /sdcard 0000 system system
29 # Create cgroup mount point for cpu accounting
31 mount cgroup none /acct cpuacct
35 mkdir /data 0771 system system
36 mkdir /cache 0770 system cache
37 mkdir /config 0500 root root
39 # Directory for putting things only root should see.
40 mkdir /mnt/secure 0700 root root
42 # Directory for staging bindmounts
43 mkdir /mnt/secure/staging 0700 root root
45 # Directory-target for where the secure container
46 # imagefile directory will be bind-mounted
47 mkdir /mnt/secure/asec 0700 root root
49 # Secure container public mount points.
50 mkdir /mnt/asec 0700 root system
51 mount tmpfs tmpfs /mnt/asec mode=0755,gid=1000
53 mount rootfs rootfs / ro remount
55 write /proc/sys/kernel/panic_on_oops 1
56 write /proc/sys/kernel/hung_task_timeout_secs 0
57 write /proc/cpu/alignment 4
58 write /proc/sys/kernel/sched_latency_ns 10000000
59 write /proc/sys/kernel/sched_wakeup_granularity_ns 2000000
60 write /proc/sys/kernel/sched_compat_yield 1
61 write /proc/sys/kernel/sched_child_runs_first 0
63 # Create cgroup mount points for process groups
65 mount cgroup none /dev/cpuctl cpu
66 chown system system /dev/cpuctl
67 chown system system /dev/cpuctl/tasks
68 chmod 0777 /dev/cpuctl/tasks
69 write /dev/cpuctl/cpu.shares 1024
71 mkdir /dev/cpuctl/fg_boost
72 chown system system /dev/cpuctl/fg_boost/tasks
73 chmod 0777 /dev/cpuctl/fg_boost/tasks
74 write /dev/cpuctl/fg_boost/cpu.shares 1024
76 mkdir /dev/cpuctl/bg_non_interactive
77 chown system system /dev/cpuctl/bg_non_interactive/tasks
78 chmod 0777 /dev/cpuctl/bg_non_interactive/tasks
80 write /dev/cpuctl/bg_non_interactive/cpu.shares 52
82 # mount mtd partitions
83 # Mount /system rw first to give the filesystem a chance to save a checkpoint
84 mount yaffs2 mtd@system /system
85 mount yaffs2 mtd@system /system ro remount
87 # We chown/chmod /data again so because mount is run as root + defaults
88 mount yaffs2 mtd@userdata /data nosuid nodev
89 chown system system /data
92 # Create dump dir and collect dumps.
93 # Do this before we mount cache so eventually we can use cache for
94 # storing dumps on platforms which do not have a dedicated dump partition.
97 chown root log /data/dontpanic
98 chmod 0750 /data/dontpanic
100 # Collect apanic data, free resources and re-arm trigger
101 #copy /proc/apanic_console /data/dontpanic/apanic_console
102 #chown root log /data/dontpanic/apanic_console
103 #chmod 0640 /data/dontpanic/apanic_console
105 #copy /proc/apanic_threads /data/dontpanic/apanic_threads
106 #chown root log /data/dontpanic/apanic_threads
107 #chmod 0640 /data/dontpanic/apanic_threads
109 #write /proc/apanic_console 1
111 # Same reason as /data above
112 mount yaffs2 mtd@cache /cache nosuid nodev
113 chown system cache /cache
116 # XDAndroid permissions
120 chmod 0777 /dev/smd27
122 chmod 0777 /dev/camera
123 chmod 0777 /dev/vogue_gps
125 # This may have been created by the recovery system with odd permissions
126 chown system cache /cache/recovery
127 chmod 0770 /cache/recovery
129 #change permissions on vmallocinfo so we can grab it from bugreports
130 chown root log /proc/vmallocinfo
131 chmod 0440 /proc/vmallocinfo
133 #change permissions on kmsg & sysrq-trigger so bugreports can grab kthread stacks
134 chown root system /proc/kmsg
135 chmod 0440 /proc/kmsg
136 chown root system /proc/sysrq-trigger
137 chmod 0220 /proc/sysrq-trigger
139 # create basic filesystem structure
140 mkdir /data/misc 01771 system misc
141 mkdir /data/misc/bluetoothd 0770 bluetooth bluetooth
142 mkdir /data/misc/bluetooth 0770 system system
143 mkdir /data/misc/keystore 0700 1017 1017
144 mkdir /data/misc/vpn 0770 system system
145 mkdir /data/misc/systemkeys 0700 system system
146 mkdir /data/misc/vpn/profiles 0770 system system
149 # give system access to wpa_supplicant.conf for backup and restore
150 mkdir /data/misc/wifi 0770 wifi wifi
151 chmod 0770 /data/misc/wifi
152 chmod 0660 /data/misc/wifi/wpa_supplicant.conf
153 mkdir /data/misc/wifi/sockets 0770 wifi wifi
154 mkdir /data/misc/dhcp 0770 dhcp dhcp
155 chown dhcp dhcp /data/misc/dhcp
157 mkdir /data/local 0771 shell shell
158 mkdir /data/local/tmp 0771 shell shell
159 mkdir /data/data 0771 system system
160 mkdir /data/app-private 0771 system system
161 mkdir /data/app 0771 system system
162 mkdir /data/property 0700 root root
164 # create dalvik-cache and double-check the perms
165 mkdir /data/dalvik-cache 0771 system system
166 chown system system /data/dalvik-cache
167 chmod 0771 /data/dalvik-cache
169 # create the lost+found directories, so as to enforce our permissions
170 mkdir /data/lost+found 0770
171 mkdir /cache/lost+found 0770
173 # double check the perms, in case lost+found already exists, and set owner
174 chown root root /data/lost+found
175 chmod 0770 /data/lost+found
176 chown root root /cache/lost+found
177 chmod 0770 /cache/lost+found
183 domainname localdomain
185 # set RLIMIT_NICE to allow priorities from 19 to -20
188 # Define the oom_adj values for the classes of processes that can be
189 # killed by the kernel. These are used in ActivityManagerService.
190 setprop ro.FOREGROUND_APP_ADJ 0
191 setprop ro.VISIBLE_APP_ADJ 1
192 setprop ro.PERCEPTIBLE_APP_ADJ 2
193 setprop ro.HEAVY_WEIGHT_APP_ADJ 3
194 setprop ro.SECONDARY_SERVER_ADJ 4
195 setprop ro.BACKUP_APP_ADJ 5
196 setprop ro.HOME_APP_ADJ 6
197 setprop ro.HIDDEN_APP_MIN_ADJ 7
198 setprop ro.EMPTY_APP_ADJ 15
200 # Define the memory thresholds at which the above process classes will
201 # be killed. These numbers are in pages (4k).
202 setprop ro.FOREGROUND_APP_MEM 2048
203 setprop ro.VISIBLE_APP_MEM 3072
204 setprop ro.PERCEPTIBLE_APP_MEM 4096
205 setprop ro.HEAVY_WEIGHT_APP_MEM 4096
206 setprop ro.SECONDARY_SERVER_MEM 6144
207 setprop ro.BACKUP_APP_MEM 6144
208 setprop ro.HOME_APP_MEM 6144
209 setprop ro.HIDDEN_APP_MEM 7168
210 setprop ro.EMPTY_APP_MEM 8192
212 # Write value must be consistent with the above properties.
213 # Note that the driver only supports 6 slots, so we have HOME_APP at the
214 # same memory level as services.
215 write /sys/module/lowmemorykiller/parameters/adj 0,1,2,7,14,15
217 write /proc/sys/vm/overcommit_memory 1
218 write /proc/sys/vm/min_free_order_shift 4
219 write /sys/module/lowmemorykiller/parameters/minfree 1536,2048,4096,5120,5632,6144
221 # Set init its forked children's oom_adj.
222 write /proc/1/oom_adj -16
224 # Tweak background writeout
225 write /proc/sys/vm/laptop_mode 7
226 write /proc/sys/vm/dirty_ratio 90
227 write /proc/sys/vm/dirty_expire_centisecs 60000
228 write /proc/sys/vm/dirty_writeback_centisecs 60000
229 write /proc/sys/vm/dirty_background_ratio 5
231 # Permissions for System Server and daemons.
232 chown radio system /sys/android_power/state
233 chown radio system /sys/android_power/request_state
234 chown radio system /sys/android_power/acquire_full_wake_lock
235 chown radio system /sys/android_power/acquire_partial_wake_lock
236 chown radio system /sys/android_power/release_wake_lock
237 chown radio system /sys/power/state
238 chown radio system /sys/power/wake_lock
239 chown radio system /sys/power/wake_unlock
240 chmod 0660 /sys/power/state
241 chmod 0660 /sys/power/wake_lock
242 chmod 0660 /sys/power/wake_unlock
243 chown system system /sys/class/timed_output/vibrator/enable
244 chown system system /sys/class/leds/keyboard-backlight/brightness
245 chown system system /sys/class/leds/lcd-backlight/brightness
246 chown system system /sys/class/leds/lcd-backlight/auto_backlight
247 chown system system /sys/class/leds/button-backlight/brightness
248 chown system system /sys/class/leds/jogball-backlight/brightness
249 chown system system /sys/class/leds/red/brightness
250 chown system system /sys/class/leds/green/brightness
251 chown system system /sys/class/leds/blue/brightness
252 chown system system /sys/class/leds/red/device/grpfreq
253 chown system system /sys/class/leds/red/device/grppwm
254 chown system system /sys/class/leds/red/device/blink
255 chown system system /sys/class/leds/red/brightness
256 chown system system /sys/class/leds/green/brightness
257 chown system system /sys/class/leds/blue/brightness
258 chown system system /sys/class/leds/amber/brightness
259 chown system system /sys/class/timed_output/vibrator/enable
260 chown system system /sys/module/sco/parameters/disable_esco
261 chown system system /sys/kernel/ipv4/tcp_wmem_min
262 chown system system /sys/kernel/ipv4/tcp_wmem_def
263 chown system system /sys/kernel/ipv4/tcp_wmem_max
264 chown system system /sys/kernel/ipv4/tcp_rmem_min
265 chown system system /sys/kernel/ipv4/tcp_rmem_def
266 chown system system /sys/kernel/ipv4/tcp_rmem_max
267 chown root radio /proc/cmdline
269 # XDAndroid permissions
270 chmod 0777 /sys/class/vogue_hw/audio
271 chmod 0777 /sys/class/vogue_hw/vibrate
272 chmod 0777 /sys/class/vogue_hw/lcd
273 chown bluetooth bluetooth /sys/class/rfkill/rfkill0/type
274 chown bluetooth bluetooth /sys/class/rfkill/rfkill0/state
275 chmod 0660 /sys/class/rfkill/rfkill0/state
276 chown bluetooth bluetooth /dev/ttyMSM0
277 chmod 0666 /dev/ttyHS1
278 chown root radio /proc/cmdline
279 chmod 666 /proc/cmdline
280 chmod 666 /dev/input/event0
281 chmod 666 /dev/input/event1
282 chmod 666 /dev/input/event2
283 chmod 666 /dev/input/event3
284 chmod 666 /dev/input/event4
285 chmod 666 /dev/input/event5
286 chmod 666 /dev/input/event6
287 chmod 666 /sys/class/i2c-adapter/i2c-0/0-0018/enable
288 chmod 666 /sys/class/i2c-adapter/i2c-0/0-0019/enable
289 chmod 666 /sys/class/i2c-adapter/i2c-0/0-0018/rate
290 chmod 666 /sys/class/i2c-adapter/i2c-0/0-0019/rate
291 chmod 666 /sys/class/i2c-adapter/i2c-0/0-0018/scale
292 chmod 666 /sys/class/i2c-adapter/i2c-0/0-0019/scale
293 chmod 666 /dev/uinput
294 chmod 666 /etc/bluez/audio.conf
295 chmod 666 /etc/bluez/hcid.conf
296 chmod 666 /etc/bluez/input.conf
297 chmod 666 /dev/msm_snd
298 chmod 666 /dev/msm_pcm_in
299 chmod 666 /dev/msm_audpre
300 chmod 666 /dev/msm_mp3
301 chmod 666 /dev/msm_pcm_out
302 chmod 666 /dev/msm_pcm_ctl
303 chmod 666 /dev/msm_hw3dm
304 chmod 666 /dev/msm_hw3dc
305 chmod 666 /dev/htc-acoustic_wince
307 # Define TCP buffer sizes for various networks
308 # ReadMin, ReadInitial, ReadMax, WriteMin, WriteInitial, WriteMax,
309 setprop net.tcp.buffersize.default 4096,87380,110208,4096,16384,110208
310 setprop net.tcp.buffersize.wifi 4095,87380,110208,4096,16384,110208
311 setprop net.tcp.buffersize.umts 4094,87380,110208,4096,16384,110208
312 setprop net.tcp.buffersize.edge 4093,26280,35040,4096,16384,35040
313 setprop net.tcp.buffersize.gprs 4092,8760,11680,4096,8760,11680
317 ## Daemon processes to be run by init.
319 service ueventd /sbin/ueventd
322 service console /bin/sh
325 # adbd is controlled by the persist.service.adb.enable system property
326 service adbd /sbin/adbd
329 # adbd on at boot in emulator
330 on property:ro.kernel.qemu=1
333 on property:persist.service.adb.enable=1
336 on property:persist.service.adb.enable=0
339 service servicemanager /system/bin/servicemanager
342 onrestart restart zygote
343 onrestart restart media
344 onrestart restart netd
346 service vold /system/bin/vold
347 socket vold stream 0660 root mount
350 service netd /bin/netd
351 socket netd stream 0660 root system
353 service debuggerd /system/bin/debuggerd
355 service ril-daemon /system/bin/rild
356 socket rild stream 660 root radio
357 socket rild-debug stream 660 radio system
359 group radio cache inet misc audio sdcard_rw
361 service zygote /system/bin/app_process -Xzygote /system/bin --zygote --start-system-server
362 socket zygote stream 666
363 onrestart write /sys/android_power/request_state wake
364 onrestart write /sys/power/state on
365 onrestart restart media
367 service media /system/bin/mediaserver
369 group system audio camera graphics inet net_bt net_bt_admin net_raw
372 service bootanim /system/bin/bootanimation
378 service dbus /system/bin/dbus-daemon --system --nofork
379 socket dbus stream 660 bluetooth bluetooth
381 group bluetooth net_bt_admin
383 service bluetoothd /system/bin/bluetoothd -n
384 socket bluetooth stream 660 bluetooth bluetooth
385 socket dbus_bluetooth stream 660 bluetooth bluetooth
386 # init.rc does not yet support applying capabilities, so run as root and
387 # let bluetoothd drop uid to bluetooth with the right linux capabilities
388 group bluetooth net_bt_admin misc
391 service hfag /system/bin/sdptool add --channel=10 HFAG
393 group bluetooth net_bt_admin
397 service hsag /system/bin/sdptool add --channel=11 HSAG
399 group bluetooth net_bt_admin
403 service opush /system/bin/sdptool add --channel=12 OPUSH
405 group bluetooth net_bt_admin
409 service pbap /system/bin/sdptool add --channel=19 PBAP
411 group bluetooth net_bt_admin
415 service installd /system/bin/installd
416 socket installd stream 600 system system
418 service flash_recovery /system/etc/install-recovery.sh
421 service racoon /system/bin/racoon
422 socket racoon stream 600 system system
423 # racoon will setuid to vpn after getting necessary resources.
428 service mtpd /system/bin/mtpd
429 socket mtpd stream 600 system system
431 group vpn net_admin net_raw
435 service keystore /system/bin/keystore /data/misc/keystore
438 socket keystore stream 666
440 service dumpstate /system/bin/dumpstate -s
441 socket dumpstate stream 0660 shell log
445 service hciattach /system/bin/hciattach \
446 -n -s 115200 /dev/ttyHS1 texas 115200 flow
448 group bluetooth net_bt_admin
451 service wlan_loader /etc/wifi/loadit
455 service wpa_supplicant /system/bin/wpa_supplicant \
456 -Dtiwlan0 -iwlan0 -c/data/misc/wifi/wpa_supplicant.conf -q
457 # we will start as root and wpa_supplicant will switch to user wifi
458 # after setting up the capabilities required for WEXT
460 # group wifi inet keystore
461 socket wpa_wlan0 dgram 660 wifi wifi
465 service dhcpcd /system/bin/dhcpcd -ABKL
469 service pppd_gprs /system/bin/pppd /dev/smd1 defaultroute local usepeerdns \
470 noipdefault unit 0 nodetach linkname gprs \
471 lcp-restart 1 lcp-max-configure 3 ipcp-restart 1 ipcp-max-configure 3