1########################## 2# property service keys 3# 4# 5net.rmnet u:object_r:net_radio_prop:s0 6net.gprs u:object_r:net_radio_prop:s0 7net.ppp u:object_r:net_radio_prop:s0 8net.qmi u:object_r:net_radio_prop:s0 9net.lte u:object_r:net_radio_prop:s0 10net.cdma u:object_r:net_radio_prop:s0 11net.dns u:object_r:net_dns_prop:s0 12sys.usb.config u:object_r:system_radio_prop:s0 13ril. u:object_r:radio_prop:s0 14ro.ril. u:object_r:radio_prop:s0 15gsm. u:object_r:radio_prop:s0 16persist.radio u:object_r:radio_prop:s0 17 18net. u:object_r:system_prop:s0 19dev. u:object_r:system_prop:s0 20ro.runtime. u:object_r:system_prop:s0 21ro.runtime.firstboot u:object_r:firstboot_prop:s0 22hw. u:object_r:system_prop:s0 23ro.hw. u:object_r:system_prop:s0 24sys. u:object_r:system_prop:s0 25sys.audio. u:object_r:audio_prop:s0 26sys.init.perf_lsm_hooks u:object_r:init_perf_lsm_hooks_prop:s0 27sys.cppreopt u:object_r:cppreopt_prop:s0 28sys.lpdumpd u:object_r:lpdumpd_prop:s0 29sys.powerctl u:object_r:powerctl_prop:s0 30sys.usb.ffs. u:object_r:ffs_prop:s0 31service. u:object_r:system_prop:s0 32dhcp. u:object_r:dhcp_prop:s0 33dhcp.bt-pan.result u:object_r:pan_result_prop:s0 34bluetooth. u:object_r:bluetooth_prop:s0 35 36debug. u:object_r:debug_prop:s0 37debug.db. u:object_r:debuggerd_prop:s0 38dumpstate. u:object_r:dumpstate_prop:s0 39dumpstate.options u:object_r:dumpstate_options_prop:s0 40init.svc_debug_pid. u:object_r:init_svc_debug_prop:s0 41llk. u:object_r:llkd_prop:s0 42khungtask. u:object_r:llkd_prop:s0 43ro.llk. u:object_r:llkd_prop:s0 44ro.khungtask. u:object_r:llkd_prop:s0 45lmkd.reinit u:object_r:lmkd_prop:s0 exact int 46log. u:object_r:log_prop:s0 47log.tag u:object_r:log_tag_prop:s0 48log.tag.WifiHAL u:object_r:wifi_log_prop:s0 49security.perf_harden u:object_r:shell_prop:s0 50service.adb.root u:object_r:shell_prop:s0 51service.adb.tls.port u:object_r:adbd_prop:s0 52persist.adb.wifi. u:object_r:adbd_prop:s0 53persist.adb.tls_server.enable u:object_r:system_adbd_prop:s0 54 55persist.audio. u:object_r:audio_prop:s0 56persist.bluetooth. u:object_r:bluetooth_prop:s0 57persist.nfc_cfg. u:object_r:nfc_prop:s0 58persist.debug. u:object_r:persist_debug_prop:s0 59persist.logd. u:object_r:logd_prop:s0 60ro.logd. u:object_r:logd_prop:s0 61persist.logd.security u:object_r:device_logging_prop:s0 62persist.logd.logpersistd u:object_r:logpersistd_logging_prop:s0 63logd.logpersistd u:object_r:logpersistd_logging_prop:s0 64persist.log.tag u:object_r:log_tag_prop:s0 65persist.mmc. u:object_r:mmc_prop:s0 66persist.netd.stable_secret u:object_r:netd_stable_secret_prop:s0 67persist.pm.mock-upgrade u:object_r:mock_ota_prop:s0 68persist.sys. u:object_r:system_prop:s0 69persist.sys.safemode u:object_r:safemode_prop:s0 70persist.sys.theme u:object_r:theme_prop:s0 71persist.sys.fflag.override.settings_dynamic_system u:object_r:dynamic_system_prop:s0 72ro.sys.safemode u:object_r:safemode_prop:s0 73persist.sys.audit_safemode u:object_r:safemode_prop:s0 74persist.sys.dalvik.jvmtiagent u:object_r:system_jvmti_agent_prop:s0 75persist.service. u:object_r:system_prop:s0 76persist.service.bdroid. u:object_r:bluetooth_prop:s0 77persist.security. u:object_r:system_prop:s0 78persist.traced.enable u:object_r:traced_enabled_prop:s0 79traced.lazy. u:object_r:traced_lazy_prop:s0 80persist.heapprofd.enable u:object_r:heapprofd_enabled_prop:s0 81persist.traced_perf.enable u:object_r:traced_perf_enabled_prop:s0 82persist.vendor.overlay. u:object_r:overlay_prop:s0 83ro.boot.vendor.overlay. u:object_r:overlay_prop:s0 84ro.boottime. u:object_r:boottime_prop:s0 85ro.serialno u:object_r:serialno_prop:s0 86ro.boot.btmacaddr u:object_r:bluetooth_prop:s0 87ro.boot.serialno u:object_r:serialno_prop:s0 88ro.bt. u:object_r:bluetooth_prop:s0 89ro.boot.bootreason u:object_r:bootloader_boot_reason_prop:s0 90persist.sys.boot.reason u:object_r:last_boot_reason_prop:s0 91sys.boot.reason u:object_r:system_boot_reason_prop:s0 92sys.boot.reason.last u:object_r:last_boot_reason_prop:s0 93pm. u:object_r:pm_prop:s0 94test.sys.boot.reason u:object_r:test_boot_reason_prop:s0 95test.userspace_reboot.requested u:object_r:userspace_reboot_test_prop:s0 96sys.lmk. u:object_r:system_lmk_prop:s0 97sys.trace. u:object_r:system_trace_prop:s0 98 99# Fastbootd protocol control property 100fastbootd.protocol u:object_r:fastbootd_protocol_prop:s0 exact enum usb tcp 101 102# adbd protoctl configuration property 103service.adb.tcp.port u:object_r:adbd_config_prop:s0 exact int 104 105# Boolean property set by system server upon boot indicating 106# if device is fully owned by organization instead of being 107# a personal device. 108ro.organization_owned u:object_r:device_logging_prop:s0 109 110# selinux non-persistent properties 111selinux.restorecon_recursive u:object_r:restorecon_prop:s0 112 113# default property context 114* u:object_r:default_prop:s0 115 116# data partition encryption properties 117vold. u:object_r:vold_prop:s0 118ro.crypto. u:object_r:vold_prop:s0 119 120# ro.build.fingerprint is either set in /system/build.prop, or is 121# set at runtime by system_server. 122ro.build.fingerprint u:object_r:fingerprint_prop:s0 123 124ro.persistent_properties.ready u:object_r:persistent_properties_ready_prop:s0 125 126# ctl properties 127ctl.bootanim u:object_r:ctl_bootanim_prop:s0 128ctl.dumpstate u:object_r:ctl_dumpstate_prop:s0 129ctl.fuse_ u:object_r:ctl_fuse_prop:s0 130ctl.mdnsd u:object_r:ctl_mdnsd_prop:s0 131ctl.ril-daemon u:object_r:ctl_rildaemon_prop:s0 132ctl.bugreport u:object_r:ctl_bugreport_prop:s0 133ctl.console u:object_r:ctl_console_prop:s0 134ctl. u:object_r:ctl_default_prop:s0 135 136# Don't allow blind access to all services 137ctl.sigstop_on$ u:object_r:ctl_sigstop_prop:s0 138ctl.sigstop_off$ u:object_r:ctl_sigstop_prop:s0 139ctl.start$ u:object_r:ctl_start_prop:s0 140ctl.stop$ u:object_r:ctl_stop_prop:s0 141ctl.restart$ u:object_r:ctl_restart_prop:s0 142ctl.interface_start$ u:object_r:ctl_interface_start_prop:s0 143ctl.interface_stop$ u:object_r:ctl_interface_stop_prop:s0 144ctl.interface_restart$ u:object_r:ctl_interface_restart_prop:s0 145 146 # Restrict access to starting/stopping adbd 147ctl.start$adbd u:object_r:ctl_adbd_prop:s0 148ctl.stop$adbd u:object_r:ctl_adbd_prop:s0 149ctl.restart$adbd u:object_r:ctl_adbd_prop:s0 150 151# Restrict access to starting/stopping gsid. 152ctl.start$gsid u:object_r:ctl_gsid_prop:s0 153ctl.stop$gsid u:object_r:ctl_gsid_prop:s0 154ctl.restart$gsid u:object_r:ctl_gsid_prop:s0 155 156# Restrict access to stopping apexd. 157ctl.stop$apexd u:object_r:ctl_apexd_prop:s0 158 159# Restrict access to restart dumpstate 160ctl.interface_restart$android.hardware.dumpstate u:object_r:ctl_dumpstate_prop:s0 161 162# NFC properties 163nfc. u:object_r:nfc_prop:s0 164 165# These properties are not normally set by processes other than init. 166# They are only distinguished here for setting by qemu-props on the 167# emulator/goldfish. 168config. u:object_r:config_prop:s0 169ro.config. u:object_r:config_prop:s0 170dalvik. u:object_r:dalvik_prop:s0 171ro.dalvik. u:object_r:dalvik_prop:s0 172 173# Shared between system server and wificond 174wifi. u:object_r:wifi_prop:s0 175wlan. u:object_r:wifi_prop:s0 176 177# Lowpan properties 178lowpan. u:object_r:lowpan_prop:s0 179ro.lowpan. u:object_r:lowpan_prop:s0 180 181# heapprofd properties 182heapprofd. u:object_r:heapprofd_prop:s0 183 184# hwservicemanager properties 185hwservicemanager. u:object_r:hwservicemanager_prop:s0 186 187# Common default properties for vendor and odm. 188init.svc.odm. u:object_r:vendor_default_prop:s0 189init.svc.vendor. u:object_r:vendor_default_prop:s0 190ro.hardware. u:object_r:vendor_default_prop:s0 191ro.odm. u:object_r:vendor_default_prop:s0 192ro.vendor. u:object_r:vendor_default_prop:s0 193odm. u:object_r:vendor_default_prop:s0 194persist.odm. u:object_r:vendor_default_prop:s0 195persist.vendor. u:object_r:vendor_default_prop:s0 196vendor. u:object_r:vendor_default_prop:s0 197# ro.boot. properties are set based on kernel commandline arguments, which are vendor owned. 198ro.boot. u:object_r:exported2_default_prop:s0 199 200# Properties that relate to time / time zone detection behavior. 201persist.time. u:object_r:time_prop:s0 202 203# Properties that relate to server configurable flags 204device_config.reset_performed u:object_r:device_config_reset_performed_prop:s0 205persist.device_config.activity_manager_native_boot. u:object_r:device_config_activity_manager_native_boot_prop:s0 206persist.device_config.attempted_boot_count u:object_r:device_config_boot_count_prop:s0 207persist.device_config.input_native_boot. u:object_r:device_config_input_native_boot_prop:s0 208persist.device_config.netd_native. u:object_r:device_config_netd_native_prop:s0 209persist.device_config.runtime_native. u:object_r:device_config_runtime_native_prop:s0 210persist.device_config.runtime_native_boot. u:object_r:device_config_runtime_native_boot_prop:s0 211persist.device_config.media_native. u:object_r:device_config_media_native_prop:s0 212persist.device_config.storage_native_boot. u:object_r:device_config_storage_native_boot_prop:s0 213persist.device_config.window_manager_native_boot. u:object_r:device_config_window_manager_native_boot_prop:s0 214persist.device_config.configuration. u:object_r:device_config_configuration_prop:s0 215 216# Properties that relate to legacy server configurable flags 217persist.device_config.global_settings.sys_traced u:object_r:device_config_sys_traced_prop:s0 218 219apexd. u:object_r:apexd_prop:s0 220persist.apexd. u:object_r:apexd_prop:s0 221 222bpf.progs_loaded u:object_r:bpf_progs_loaded_prop:s0 223 224gsid. u:object_r:gsid_prop:s0 225ro.gsid. u:object_r:gsid_prop:s0 226 227# Property for disabling NNAPI vendor extensions on product image (used on GSI /product image, 228# which can't use NNAPI vendor extensions). 229ro.nnapi.extensions.deny_on_product u:object_r:nnapi_ext_deny_product_prop:s0 230 231# Property that is set once ueventd finishes cold boot. 232ro.cold_boot_done u:object_r:cold_boot_done_prop:s0 233 234# Charger properties 235ro.charger. u:object_r:charger_prop:s0 236 237# Virtual A/B properties 238ro.virtual_ab.enabled u:object_r:virtual_ab_prop:s0 239ro.virtual_ab.retrofit u:object_r:virtual_ab_prop:s0 240 241# Property to set/clear the warm reset flag after an OTA update. 242ota.warm_reset u:object_r:ota_prop:s0 243 244# Module properties 245com.android.sdkext. u:object_r:module_sdkextensions_prop:s0 246persist.com.android.sdkext. u:object_r:module_sdkextensions_prop:s0 247 248# Userspace reboot properties 249sys.userspace_reboot.log. u:object_r:userspace_reboot_log_prop:s0 250persist.sys.userspace_reboot.log. u:object_r:userspace_reboot_log_prop:s0 251 252# Integer property which is used in libgui to configure the number of frames 253# tracked by buffer queue's frame event timing history. The property is set 254# by devices with video decoding pipelines long enough to overflow the default 255# history size. 256ro.lib_gui.frame_event_history_size u:object_r:bq_config_prop:s0 257 258# Property to enable incremental feature 259ro.incremental.enable u:object_r:incremental_prop:s0 260 261# Properties to configure userspace reboot. 262init.userspace_reboot.is_supported u:object_r:userspace_reboot_config_prop:s0 exact bool 263init.userspace_reboot.sigkill.timeoutmillis u:object_r:userspace_reboot_config_prop:s0 exact int 264init.userspace_reboot.sigterm.timeoutmillis u:object_r:userspace_reboot_config_prop:s0 exact int 265init.userspace_reboot.started.timeoutmillis u:object_r:userspace_reboot_config_prop:s0 exact int 266init.userspace_reboot.userdata_remount.timeoutmillis u:object_r:userspace_reboot_config_prop:s0 exact int 267init.userspace_reboot.watchdog.timeoutmillis u:object_r:userspace_reboot_config_prop:s0 exact int 268 269# surfaceflinger-settable 270graphics.display.kernel_idle_timer.enabled u:object_r:surfaceflinger_display_prop:s0 exact bool 271