1########################## 2# property service keys 3# 4# 5net.rmnet u:object_r:net_radio_prop:s0 6net.gprs u:object_r:net_radio_prop:s0 7net.ppp u:object_r:net_radio_prop:s0 8net.qmi u:object_r:net_radio_prop:s0 9net.lte u:object_r:net_radio_prop:s0 10net.cdma u:object_r:net_radio_prop:s0 11net.dns u:object_r:net_dns_prop:s0 12sys.usb.config u:object_r:system_radio_prop:s0 13ril. u:object_r:radio_prop:s0 14ro.ril. u:object_r:radio_prop:s0 15gsm. u:object_r:radio_prop:s0 16persist.radio u:object_r:radio_prop:s0 17 18net. u:object_r:system_prop:s0 19dev. u:object_r:system_prop:s0 20ro.runtime. u:object_r:system_prop:s0 21ro.runtime.firstboot u:object_r:firstboot_prop:s0 22hw. u:object_r:system_prop:s0 23ro.hw. u:object_r:system_prop:s0 24sys. u:object_r:system_prop:s0 25sys.audio. u:object_r:audio_prop:s0 26sys.init.perf_lsm_hooks u:object_r:init_perf_lsm_hooks_prop:s0 27sys.cppreopt u:object_r:cppreopt_prop:s0 28sys.lpdumpd u:object_r:lpdumpd_prop:s0 29sys.powerctl u:object_r:powerctl_prop:s0 30sys.usb.ffs. u:object_r:ffs_prop:s0 31service. u:object_r:system_prop:s0 32dhcp. u:object_r:dhcp_prop:s0 33dhcp.bt-pan.result u:object_r:pan_result_prop:s0 34bluetooth. u:object_r:bluetooth_prop:s0 35 36debug. u:object_r:debug_prop:s0 37debug.db. u:object_r:debuggerd_prop:s0 38dumpstate. u:object_r:dumpstate_prop:s0 39dumpstate.options u:object_r:dumpstate_options_prop:s0 40init.svc_debug_pid. u:object_r:init_svc_debug_prop:s0 41llk. u:object_r:llkd_prop:s0 42khungtask. u:object_r:llkd_prop:s0 43ro.llk. u:object_r:llkd_prop:s0 44ro.khungtask. u:object_r:llkd_prop:s0 45lmkd.reinit u:object_r:lmkd_prop:s0 exact int 46log. u:object_r:log_prop:s0 47log.tag u:object_r:log_tag_prop:s0 48log.tag.WifiHAL u:object_r:wifi_log_prop:s0 49security.perf_harden u:object_r:shell_prop:s0 50service.adb.root u:object_r:shell_prop:s0 51service.adb.tcp.port u:object_r:shell_prop:s0 52service.adb.tls.port u:object_r:adbd_prop:s0 53persist.adb.wifi. u:object_r:adbd_prop:s0 54persist.adb.tls_server.enable u:object_r:system_adbd_prop:s0 55 56persist.audio. u:object_r:audio_prop:s0 57persist.bluetooth. u:object_r:bluetooth_prop:s0 58persist.nfc_cfg. u:object_r:nfc_prop:s0 59persist.debug. u:object_r:persist_debug_prop:s0 60persist.logd. u:object_r:logd_prop:s0 61ro.logd. u:object_r:logd_prop:s0 62persist.logd.security u:object_r:device_logging_prop:s0 63persist.logd.logpersistd u:object_r:logpersistd_logging_prop:s0 64logd.logpersistd u:object_r:logpersistd_logging_prop:s0 65persist.log.tag u:object_r:log_tag_prop:s0 66persist.mmc. u:object_r:mmc_prop:s0 67persist.netd.stable_secret u:object_r:netd_stable_secret_prop:s0 68persist.pm.mock-upgrade u:object_r:mock_ota_prop:s0 69persist.sys. u:object_r:system_prop:s0 70persist.sys.safemode u:object_r:safemode_prop:s0 71persist.sys.theme u:object_r:theme_prop:s0 72persist.sys.fflag.override.settings_dynamic_system u:object_r:dynamic_system_prop:s0 73ro.sys.safemode u:object_r:safemode_prop:s0 74persist.sys.audit_safemode u:object_r:safemode_prop:s0 75persist.sys.dalvik.jvmtiagent u:object_r:system_jvmti_agent_prop:s0 76persist.service. u:object_r:system_prop:s0 77persist.service.bdroid. u:object_r:bluetooth_prop:s0 78persist.security. u:object_r:system_prop:s0 79persist.traced.enable u:object_r:traced_enabled_prop:s0 80traced.lazy. u:object_r:traced_lazy_prop:s0 81persist.heapprofd.enable u:object_r:heapprofd_enabled_prop:s0 82persist.traced_perf.enable u:object_r:traced_perf_enabled_prop:s0 83persist.vendor.overlay. u:object_r:overlay_prop:s0 84ro.boot.vendor.overlay. u:object_r:overlay_prop:s0 85ro.boottime. u:object_r:boottime_prop:s0 86ro.serialno u:object_r:serialno_prop:s0 87ro.boot.btmacaddr u:object_r:bluetooth_prop:s0 88ro.boot.serialno u:object_r:serialno_prop:s0 89ro.bt. u:object_r:bluetooth_prop:s0 90ro.boot.bootreason u:object_r:bootloader_boot_reason_prop:s0 91persist.sys.boot.reason u:object_r:last_boot_reason_prop:s0 92sys.boot.reason u:object_r:system_boot_reason_prop:s0 93sys.boot.reason.last u:object_r:last_boot_reason_prop:s0 94pm. u:object_r:pm_prop:s0 95test.sys.boot.reason u:object_r:test_boot_reason_prop:s0 96test.userspace_reboot.requested u:object_r:userspace_reboot_test_prop:s0 97sys.lmk. u:object_r:system_lmk_prop:s0 98sys.trace. u:object_r:system_trace_prop:s0 99 100# Fastbootd protocol control property 101fastbootd.protocol u:object_r:fastbootd_protocol_prop:s0 exact enum usb tcp 102 103# Boolean property set by system server upon boot indicating 104# if device is fully owned by organization instead of being 105# a personal device. 106ro.organization_owned u:object_r:device_logging_prop:s0 107 108# selinux non-persistent properties 109selinux.restorecon_recursive u:object_r:restorecon_prop:s0 110 111# default property context 112* u:object_r:default_prop:s0 113 114# data partition encryption properties 115vold. u:object_r:vold_prop:s0 116ro.crypto. u:object_r:vold_prop:s0 117 118# ro.build.fingerprint is either set in /system/build.prop, or is 119# set at runtime by system_server. 120ro.build.fingerprint u:object_r:fingerprint_prop:s0 121 122ro.persistent_properties.ready u:object_r:persistent_properties_ready_prop:s0 123 124# ctl properties 125ctl.bootanim u:object_r:ctl_bootanim_prop:s0 126ctl.dumpstate u:object_r:ctl_dumpstate_prop:s0 127ctl.fuse_ u:object_r:ctl_fuse_prop:s0 128ctl.mdnsd u:object_r:ctl_mdnsd_prop:s0 129ctl.ril-daemon u:object_r:ctl_rildaemon_prop:s0 130ctl.bugreport u:object_r:ctl_bugreport_prop:s0 131ctl.console u:object_r:ctl_console_prop:s0 132ctl. u:object_r:ctl_default_prop:s0 133 134# Don't allow blind access to all services 135ctl.sigstop_on$ u:object_r:ctl_sigstop_prop:s0 136ctl.sigstop_off$ u:object_r:ctl_sigstop_prop:s0 137ctl.start$ u:object_r:ctl_start_prop:s0 138ctl.stop$ u:object_r:ctl_stop_prop:s0 139ctl.restart$ u:object_r:ctl_restart_prop:s0 140ctl.interface_start$ u:object_r:ctl_interface_start_prop:s0 141ctl.interface_stop$ u:object_r:ctl_interface_stop_prop:s0 142ctl.interface_restart$ u:object_r:ctl_interface_restart_prop:s0 143 144 # Restrict access to starting/stopping adbd 145ctl.start$adbd u:object_r:ctl_adbd_prop:s0 146ctl.stop$adbd u:object_r:ctl_adbd_prop:s0 147ctl.restart$adbd u:object_r:ctl_adbd_prop:s0 148 149# Restrict access to starting/stopping gsid. 150ctl.start$gsid u:object_r:ctl_gsid_prop:s0 151ctl.stop$gsid u:object_r:ctl_gsid_prop:s0 152ctl.restart$gsid u:object_r:ctl_gsid_prop:s0 153 154# Restrict access to stopping apexd. 155ctl.stop$apexd u:object_r:ctl_apexd_prop:s0 156 157# Restrict access to restart dumpstate 158ctl.interface_restart$android.hardware.dumpstate u:object_r:ctl_dumpstate_prop:s0 159 160# NFC properties 161nfc. u:object_r:nfc_prop:s0 162 163# These properties are not normally set by processes other than init. 164# They are only distinguished here for setting by qemu-props on the 165# emulator/goldfish. 166config. u:object_r:config_prop:s0 167ro.config. u:object_r:config_prop:s0 168dalvik. u:object_r:dalvik_prop:s0 169ro.dalvik. u:object_r:dalvik_prop:s0 170 171# Shared between system server and wificond 172wifi. u:object_r:wifi_prop:s0 173wlan. u:object_r:wifi_prop:s0 174 175# Lowpan properties 176lowpan. u:object_r:lowpan_prop:s0 177ro.lowpan. u:object_r:lowpan_prop:s0 178 179# heapprofd properties 180heapprofd. u:object_r:heapprofd_prop:s0 181 182# hwservicemanager properties 183hwservicemanager. u:object_r:hwservicemanager_prop:s0 184 185# Common default properties for vendor and odm. 186init.svc.odm. u:object_r:vendor_default_prop:s0 187init.svc.vendor. u:object_r:vendor_default_prop:s0 188ro.hardware. u:object_r:vendor_default_prop:s0 189ro.odm. u:object_r:vendor_default_prop:s0 190ro.vendor. u:object_r:vendor_default_prop:s0 191odm. u:object_r:vendor_default_prop:s0 192persist.odm. u:object_r:vendor_default_prop:s0 193persist.vendor. u:object_r:vendor_default_prop:s0 194vendor. u:object_r:vendor_default_prop:s0 195# ro.boot. properties are set based on kernel commandline arguments, which are vendor owned. 196ro.boot. u:object_r:exported2_default_prop:s0 197 198# Properties that relate to time / time zone detection behavior. 199persist.time. u:object_r:time_prop:s0 200 201# Properties that relate to server configurable flags 202device_config.reset_performed u:object_r:device_config_reset_performed_prop:s0 203persist.device_config.activity_manager_native_boot. u:object_r:device_config_activity_manager_native_boot_prop:s0 204persist.device_config.attempted_boot_count u:object_r:device_config_boot_count_prop:s0 205persist.device_config.input_native_boot. u:object_r:device_config_input_native_boot_prop:s0 206persist.device_config.netd_native. u:object_r:device_config_netd_native_prop:s0 207persist.device_config.runtime_native. u:object_r:device_config_runtime_native_prop:s0 208persist.device_config.runtime_native_boot. u:object_r:device_config_runtime_native_boot_prop:s0 209persist.device_config.media_native. u:object_r:device_config_media_native_prop:s0 210persist.device_config.storage_native_boot. u:object_r:device_config_storage_native_boot_prop:s0 211persist.device_config.window_manager_native_boot. u:object_r:device_config_window_manager_native_boot_prop:s0 212persist.device_config.configuration. u:object_r:device_config_configuration_prop:s0 213 214# Properties that relate to legacy server configurable flags 215persist.device_config.global_settings.sys_traced u:object_r:device_config_sys_traced_prop:s0 216 217apexd. u:object_r:apexd_prop:s0 218persist.apexd. u:object_r:apexd_prop:s0 219 220bpf.progs_loaded u:object_r:bpf_progs_loaded_prop:s0 221 222gsid. u:object_r:gsid_prop:s0 223ro.gsid. u:object_r:gsid_prop:s0 224 225# Property for disabling NNAPI vendor extensions on product image (used on GSI /product image, 226# which can't use NNAPI vendor extensions). 227ro.nnapi.extensions.deny_on_product u:object_r:nnapi_ext_deny_product_prop:s0 228 229# Property that is set once ueventd finishes cold boot. 230ro.cold_boot_done u:object_r:cold_boot_done_prop:s0 231 232# Charger properties 233ro.charger. u:object_r:charger_prop:s0 234 235# Virtual A/B properties 236ro.virtual_ab.enabled u:object_r:virtual_ab_prop:s0 237ro.virtual_ab.retrofit u:object_r:virtual_ab_prop:s0 238 239# Property to set/clear the warm reset flag after an OTA update. 240ota.warm_reset u:object_r:ota_prop:s0 241 242# Module properties 243com.android.sdkext. u:object_r:module_sdkextensions_prop:s0 244persist.com.android.sdkext. u:object_r:module_sdkextensions_prop:s0 245 246# Userspace reboot properties 247sys.userspace_reboot.log. u:object_r:userspace_reboot_log_prop:s0 248persist.sys.userspace_reboot.log. u:object_r:userspace_reboot_log_prop:s0 249 250# Integer property which is used in libgui to configure the number of frames 251# tracked by buffer queue's frame event timing history. The property is set 252# by devices with video decoding pipelines long enough to overflow the default 253# history size. 254ro.lib_gui.frame_event_history_size u:object_r:bq_config_prop:s0 255 256# Property to enable incremental feature 257ro.incremental.enable u:object_r:incremental_prop:s0 258 259# Properties to configure userspace reboot. 260init.userspace_reboot.is_supported u:object_r:userspace_reboot_config_prop:s0 exact bool 261init.userspace_reboot.sigkill.timeoutmillis u:object_r:userspace_reboot_config_prop:s0 exact int 262init.userspace_reboot.sigterm.timeoutmillis u:object_r:userspace_reboot_config_prop:s0 exact int 263init.userspace_reboot.started.timeoutmillis u:object_r:userspace_reboot_config_prop:s0 exact int 264init.userspace_reboot.userdata_remount.timeoutmillis u:object_r:userspace_reboot_config_prop:s0 exact int 265init.userspace_reboot.watchdog.timeoutmillis u:object_r:userspace_reboot_config_prop:s0 exact int 266