| 12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576 |
- # Start Daemon (Registry directories should already be present)
- service mobicore /vendor/bin/mcDriverDaemon --P1 /mnt/vendor/persist/mcRegistry \
- -r /vendor/app/mcRegistry/020f0000000000000000000000000000.drbin \
- -r /vendor/app/mcRegistry/05120000000000000000000000000000.drbin \
- -r /vendor/app/mcRegistry/05140000000000000000000000000000.drbin \
- -r /vendor/app/mcRegistry/020b0000000000000000000000000000.drbin \
- -r /vendor/app/mcRegistry/05070000000000000000000000000000.drbin \
- -r /vendor/app/mcRegistry/030b0000000000000000000000000000.drbin \
- -r /vendor/app/mcRegistry/030c0000000000000000000000000000.drbin \
- -r /vendor/app/mcRegistry/07060000000000000000000000007169.drbin \
- -r /vendor/app/mcRegistry/40188311faf343488db888ad39496f9a.drbin \
- -r /vendor/app/mcRegistry/06090000000000000000000000000000.drbin \
- -r /vendor/app/mcRegistry/9073f03a9618383bb1856eb3f990babd.drbin \
- -r /vendor/app/mcRegistry/5020170115e016302017012521300000.drbin
- user system
- group system
- class core
- priority -20
- seclabel u:r:recovery:s0
-
- service gatekeeper-1-0 /vendor/bin/hw/android.hardware.gatekeeper@1.0-service
- interface android.hardware.gatekeeper@1.0::IGatekeeper default
- class hal
- user system
- group system
-
- service keymaster-3-0 /vendor/bin/hw/android.hardware.keymaster@3.0-service.trustonic
- class early_hal
- user system
- group system drmrpc
-
- on init
- #create mountpoint for /mnt/vendor/persist partition
- mkdir /mnt/vendor/persist 0771 system system
- on post-fs
- chown system system /mnt/vendor/persist
- chmod 0771 /mnt/vendor/persist
- # We restorecon /mnt/vendor/persist to set SEPolicy label.
- restorecon /mnt/vendor/persist
- # Create mcRegistry to store failure record
- mkdir /mnt/vendor/persist/mcRegistry 0771 system system
- on post-fs-data
- # Create /data/vendor/key_provisioning dir and get proper encryption policy installed
- # Key Installation
- mkdir /data/vendor/key_provisioning 0771 system system
- # For META/FACTORY mode
- on property:ro.crypto.state=unsupported
- write /proc/bootprof "MOBICORE: create /data/vendor/mcRegistry ++ (unencrypted)"
- mkdir /data/vendor/mcRegistry 0775 system system
- mkdir /mnt/vendor/nvcfg/mcRegistry 0775 system system
- symlink /mnt/vendor/nvcfg/mcRegistry/00000000.authtokcont /data/vendor/mcRegistry/00000000.authtokcont
- chown system system /mnt/vendor/nvcfg/mcRegistry
- write /proc/bootprof "MOBICORE: create /data/vendor/mcRegistry -- (unencrypted)"
- # Normal mode, FBE
- on property:ro.crypto.type=file && property:ro.crypto.state=encrypted
- write /proc/bootprof "MOBICORE: create /data/vendor/mcRegistry ++ (FBE encrypted)"
- mkdir /data/vendor/mcRegistry 0775 system system
- mkdir /mnt/vendor/nvcfg/mcRegistry 0775 system system
- symlink /mnt/vendor/nvcfg/mcRegistry/00000000.authtokcont /data/vendor/mcRegistry/00000000.authtokcont
- chown system system /mnt/vendor/nvcfg/mcRegistry
- write /proc/bootprof "MOBICORE: create /data/vendor/mcRegistry -- (FBE encrypted)"
- # Normal mode, FDE
- on property:vold.decrypt=trigger_restart_framework
- write /proc/bootprof "MOBICORE: create /data/vendor/mcRegistry ++ (FDE encrypted)"
- mkdir /data/vendor/mcRegistry 0775 system system
- mkdir /mnt/vendor/nvcfg/mcRegistry 0775 system system
- symlink /mnt/vendor/nvcfg/mcRegistry/00000000.authtokcont /data/vendor/mcRegistry/00000000.authtokcont
- chown system system /mnt/vendor/nvcfg/mcRegistry
- write /proc/bootprof "MOBICORE: create /data/vendor/mcRegistry -- (FDE encrypted)"
|
