blob: 32ed170b35d1b08f970ef476501f201ebaf0aa0b [file] [log] [blame]
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -08001/*
2 * Copyright (C) 2007 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17/* This file is used to define the properties of the filesystem
18** images generated by build tools (mkbootfs and mkyaffs2image) and
19** by the device side of adb.
20*/
21
22#ifndef _ANDROID_FILESYSTEM_CONFIG_H_
23#define _ANDROID_FILESYSTEM_CONFIG_H_
24
25#include <string.h>
26#include <sys/stat.h>
27#include <sys/types.h>
Nick Kraleviche9e74f32013-02-07 14:22:12 -080028#include <stdint.h>
29#include <linux/capability.h>
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080030
31/* This is the master Users and Groups config for the platform.
32** DO NOT EVER RENUMBER.
33*/
34
35#define AID_ROOT 0 /* traditional unix root user */
36
37#define AID_SYSTEM 1000 /* system server */
38
39#define AID_RADIO 1001 /* telephony subsystem, RIL */
40#define AID_BLUETOOTH 1002 /* bluetooth subsystem */
41#define AID_GRAPHICS 1003 /* graphics devices */
42#define AID_INPUT 1004 /* input devices */
43#define AID_AUDIO 1005 /* audio devices */
44#define AID_CAMERA 1006 /* camera devices */
45#define AID_LOG 1007 /* log devices */
46#define AID_COMPASS 1008 /* compass device */
47#define AID_MOUNT 1009 /* mountd socket */
48#define AID_WIFI 1010 /* wifi subsystem */
49#define AID_ADB 1011 /* android debug bridge (adbd) */
50#define AID_INSTALL 1012 /* group for installing packages */
51#define AID_MEDIA 1013 /* mediaserver process */
52#define AID_DHCP 1014 /* dhcp client */
San Mehat6e1f2152009-04-23 09:15:08 -070053#define AID_SDCARD_RW 1015 /* external storage write access */
San Mehat4a6f2322009-05-14 19:44:59 -070054#define AID_VPN 1016 /* vpn system */
Chung-yih Wang1f75d702009-06-01 19:04:05 +080055#define AID_KEYSTORE 1017 /* keystore subsystem */
Mike Lockwood93ac1552010-05-06 13:30:09 -040056#define AID_USB 1018 /* USB devices */
aimitakeshie572d592010-07-27 08:38:35 +090057#define AID_DRM 1019 /* DRM server */
Robert Greenwalt1d91fcf2012-03-27 16:59:27 -070058#define AID_MDNSR 1020 /* MulticastDNSResponder (service discovery) */
Mike Lockwoodc29919c2010-09-27 08:01:58 -040059#define AID_GPS 1021 /* GPS daemon */
Jeff Hamiltona6a36c02011-03-24 21:40:43 -050060#define AID_UNUSED1 1022 /* deprecated, DO NOT USE */
Mike Lockwood2e0047b2010-10-29 10:55:54 -040061#define AID_MEDIA_RW 1023 /* internal media storage write access */
Mike Lockwoodaf7bdc62011-01-10 08:22:30 -050062#define AID_MTP 1024 /* MTP USB driver access */
Nick Pelly097b4ed2011-11-21 14:55:59 -080063#define AID_UNUSED2 1025 /* deprecated, DO NOT USE */
Jeffrey Tinker7005c032011-09-30 12:40:25 -070064#define AID_DRMRPC 1026 /* group for drm rpc */
Nick Pelly097b4ed2011-11-21 14:55:59 -080065#define AID_NFC 1027 /* nfc subsystem */
Dianne Hackborn50458cf2012-03-07 12:57:14 -080066#define AID_SDCARD_R 1028 /* external storage read access */
Daniel Drownb49183f2012-02-16 10:00:24 -060067#define AID_CLAT 1029 /* clat part of nat464 */
Doug Zongker8cc97302013-01-29 10:50:22 -080068#define AID_LOOP_RADIO 1030 /* loop radio devices */
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080069
70#define AID_SHELL 2000 /* adb and debug shell user */
71#define AID_CACHE 2001 /* cache access */
72#define AID_DIAG 2002 /* access to diagnostic resources */
73
74/* The 3000 series are intended for use as supplemental group id's only.
75 * They indicate special Android capabilities that the kernel is aware of. */
76#define AID_NET_BT_ADMIN 3001 /* bluetooth: create any socket */
77#define AID_NET_BT 3002 /* bluetooth: create sco, rfcomm or l2cap sockets */
78#define AID_INET 3003 /* can create AF_INET and AF_INET6 sockets */
79#define AID_NET_RAW 3004 /* can create raw INET sockets */
Chia-chi Yeh88dc6572009-06-19 14:59:08 +080080#define AID_NET_ADMIN 3005 /* can configure interfaces and routing tables. */
Jeff Sharkey4f1df182011-05-02 17:52:03 -070081#define AID_NET_BW_STATS 3006 /* read bandwidth statistics */
82#define AID_NET_BW_ACCT 3007 /* change bandwidth statistics accounting */
Matthew Xie971153a2012-10-04 12:35:27 -070083#define AID_NET_BT_STACK 3008 /* bluetooth: access config files */
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080084
85#define AID_MISC 9998 /* access to misc storage */
86#define AID_NOBODY 9999
87
Dianne Hackbornca185ab2012-02-09 11:19:00 -080088#define AID_APP 10000 /* first app user */
89
90#define AID_ISOLATED_START 99000 /* start of uids for fully isolated sandboxed processes */
91#define AID_ISOLATED_END 99999 /* end of uids for fully isolated sandboxed processes */
92
93#define AID_USER 100000 /* offset for uid ranges for each user */
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080094
Kenny Root7e41c842012-09-11 15:03:45 -070095#define AID_SHARED_GID_START 50000 /* start of gids for apps in each user to share */
96#define AID_SHARED_GID_END 59999 /* start of gids for apps in each user to share */
97
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -080098#if !defined(EXCLUDE_FS_CONFIG_STRUCTURES)
99struct android_id_info {
100 const char *name;
101 unsigned aid;
102};
103
Nick Kralevich4688ac52010-08-31 09:44:43 -0700104static const struct android_id_info android_ids[] = {
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800105 { "root", AID_ROOT, },
106 { "system", AID_SYSTEM, },
107 { "radio", AID_RADIO, },
108 { "bluetooth", AID_BLUETOOTH, },
109 { "graphics", AID_GRAPHICS, },
110 { "input", AID_INPUT, },
111 { "audio", AID_AUDIO, },
112 { "camera", AID_CAMERA, },
113 { "log", AID_LOG, },
114 { "compass", AID_COMPASS, },
115 { "mount", AID_MOUNT, },
116 { "wifi", AID_WIFI, },
117 { "dhcp", AID_DHCP, },
118 { "adb", AID_ADB, },
119 { "install", AID_INSTALL, },
120 { "media", AID_MEDIA, },
aimitakeshie572d592010-07-27 08:38:35 +0900121 { "drm", AID_DRM, },
Robert Greenwalt1d91fcf2012-03-27 16:59:27 -0700122 { "mdnsr", AID_MDNSR, },
Nick Pelly85905a62010-10-14 23:30:51 -0700123 { "nfc", AID_NFC, },
Jeffrey Tinker7005c032011-09-30 12:40:25 -0700124 { "drmrpc", AID_DRMRPC, },
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800125 { "shell", AID_SHELL, },
126 { "cache", AID_CACHE, },
127 { "diag", AID_DIAG, },
128 { "net_bt_admin", AID_NET_BT_ADMIN, },
129 { "net_bt", AID_NET_BT, },
Matthew Xie971153a2012-10-04 12:35:27 -0700130 { "net_bt_stack", AID_NET_BT_STACK, },
Dianne Hackborn5d3aadb2012-03-12 10:54:11 -0700131 { "sdcard_r", AID_SDCARD_R, },
San Mehat6e1f2152009-04-23 09:15:08 -0700132 { "sdcard_rw", AID_SDCARD_RW, },
Mike Lockwood2e0047b2010-10-29 10:55:54 -0400133 { "media_rw", AID_MEDIA_RW, },
San Mehat4a6f2322009-05-14 19:44:59 -0700134 { "vpn", AID_VPN, },
Chung-yih Wang1f75d702009-06-01 19:04:05 +0800135 { "keystore", AID_KEYSTORE, },
Mike Lockwood93ac1552010-05-06 13:30:09 -0400136 { "usb", AID_USB, },
Mike Lockwoodaf7bdc62011-01-10 08:22:30 -0500137 { "mtp", AID_MTP, },
Mike Lockwoodc29919c2010-09-27 08:01:58 -0400138 { "gps", AID_GPS, },
Chung-yih Wang1f75d702009-06-01 19:04:05 +0800139 { "inet", AID_INET, },
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800140 { "net_raw", AID_NET_RAW, },
Chia-chi Yeh88dc6572009-06-19 14:59:08 +0800141 { "net_admin", AID_NET_ADMIN, },
Jeff Sharkey4f1df182011-05-02 17:52:03 -0700142 { "net_bw_stats", AID_NET_BW_STATS, },
143 { "net_bw_acct", AID_NET_BW_ACCT, },
Doug Zongker0fe97422013-01-29 09:04:53 -0800144 { "loop_radio", AID_LOOP_RADIO, },
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800145 { "misc", AID_MISC, },
146 { "nobody", AID_NOBODY, },
Daniel Drownb49183f2012-02-16 10:00:24 -0600147 { "clat", AID_CLAT, },
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800148};
149
150#define android_id_count \
151 (sizeof(android_ids) / sizeof(android_ids[0]))
Doug Zongker08c370c2012-05-03 14:16:54 -0700152
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800153struct fs_path_config {
154 unsigned mode;
155 unsigned uid;
156 unsigned gid;
Nick Kraleviche9e74f32013-02-07 14:22:12 -0800157 uint64_t capabilities;
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800158 const char *prefix;
159};
160
161/* Rules for directories.
162** These rules are applied based on "first match", so they
163** should start with the most specific path and work their
164** way up to the root.
165*/
166
Nick Kraleviche9e74f32013-02-07 14:22:12 -0800167static const struct fs_path_config android_dirs[] = {
168 { 00770, AID_SYSTEM, AID_CACHE, 0, "cache" },
169 { 00771, AID_SYSTEM, AID_SYSTEM, 0, "data/app" },
170 { 00771, AID_SYSTEM, AID_SYSTEM, 0, "data/app-private" },
171 { 00771, AID_SYSTEM, AID_SYSTEM, 0, "data/dalvik-cache" },
172 { 00771, AID_SYSTEM, AID_SYSTEM, 0, "data/data" },
173 { 00771, AID_SHELL, AID_SHELL, 0, "data/local/tmp" },
174 { 00771, AID_SHELL, AID_SHELL, 0, "data/local" },
175 { 01771, AID_SYSTEM, AID_MISC, 0, "data/misc" },
176 { 00770, AID_DHCP, AID_DHCP, 0, "data/misc/dhcp" },
177 { 00775, AID_MEDIA_RW, AID_MEDIA_RW, 0, "data/media" },
178 { 00775, AID_MEDIA_RW, AID_MEDIA_RW, 0, "data/media/Music" },
179 { 00771, AID_SYSTEM, AID_SYSTEM, 0, "data" },
180 { 00750, AID_ROOT, AID_SHELL, 0, "sbin" },
181 { 00755, AID_ROOT, AID_SHELL, 0, "system/bin" },
182 { 00755, AID_ROOT, AID_SHELL, 0, "system/vendor" },
183 { 00755, AID_ROOT, AID_SHELL, 0, "system/xbin" },
184 { 00755, AID_ROOT, AID_ROOT, 0, "system/etc/ppp" },
185 { 00777, AID_ROOT, AID_ROOT, 0, "sdcard" },
186 { 00755, AID_ROOT, AID_ROOT, 0, 0 },
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800187};
188
189/* Rules for files.
190** These rules are applied based on "first match", so they
191** should start with the most specific path and work their
192** way up to the root. Prefixes ending in * denotes wildcard
193** and will allow partial matches.
194*/
Nick Kraleviche9e74f32013-02-07 14:22:12 -0800195static const struct fs_path_config android_files[] = {
196 { 00440, AID_ROOT, AID_SHELL, 0, "system/etc/init.goldfish.rc" },
197 { 00550, AID_ROOT, AID_SHELL, 0, "system/etc/init.goldfish.sh" },
198 { 00440, AID_ROOT, AID_SHELL, 0, "system/etc/init.trout.rc" },
199 { 00550, AID_ROOT, AID_SHELL, 0, "system/etc/init.ril" },
200 { 00550, AID_ROOT, AID_SHELL, 0, "system/etc/init.testmenu" },
201 { 00550, AID_DHCP, AID_SHELL, 0, "system/etc/dhcpcd/dhcpcd-run-hooks" },
202 { 00440, AID_BLUETOOTH, AID_BLUETOOTH, 0, "system/etc/dbus.conf" },
203 { 00444, AID_RADIO, AID_AUDIO, 0, "system/etc/AudioPara4.csv" },
204 { 00555, AID_ROOT, AID_ROOT, 0, "system/etc/ppp/*" },
205 { 00555, AID_ROOT, AID_ROOT, 0, "system/etc/rc.*" },
206 { 00644, AID_SYSTEM, AID_SYSTEM, 0, "data/app/*" },
207 { 00644, AID_MEDIA_RW, AID_MEDIA_RW, 0, "data/media/*" },
208 { 00644, AID_SYSTEM, AID_SYSTEM, 0, "data/app-private/*" },
209 { 00644, AID_APP, AID_APP, 0, "data/data/*" },
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800210 /* the following two files are INTENTIONALLY set-gid and not set-uid.
211 * Do not change. */
Nick Kraleviche9e74f32013-02-07 14:22:12 -0800212 { 02755, AID_ROOT, AID_NET_RAW, 0, "system/bin/ping" },
213 { 02750, AID_ROOT, AID_INET, 0, "system/bin/netcfg" },
David 'Digit' Turner1f4d9522010-03-02 18:05:23 -0800214 /* the following five files are INTENTIONALLY set-uid, but they
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800215 * are NOT included on user builds. */
Nick Kraleviche9e74f32013-02-07 14:22:12 -0800216 { 06755, AID_ROOT, AID_ROOT, 0, "system/xbin/su" },
217 { 06755, AID_ROOT, AID_ROOT, 0, "system/xbin/librank" },
218 { 06755, AID_ROOT, AID_ROOT, 0, "system/xbin/procrank" },
219 { 06755, AID_ROOT, AID_ROOT, 0, "system/xbin/procmem" },
220 { 06755, AID_ROOT, AID_ROOT, 0, "system/xbin/tcpdump" },
221 { 04770, AID_ROOT, AID_RADIO, 0, "system/bin/pppd-ril" },
David 'Digit' Turner1f4d9522010-03-02 18:05:23 -0800222 /* the following file is INTENTIONALLY set-uid, and IS included
223 * in user builds. */
Nick Kraleviche9e74f32013-02-07 14:22:12 -0800224 { 06750, AID_ROOT, AID_SHELL, 0, "system/bin/run-as" },
225 { 00755, AID_ROOT, AID_SHELL, 0, "system/bin/*" },
226 { 00755, AID_ROOT, AID_ROOT, 0, "system/lib/valgrind/*" },
227 { 00755, AID_ROOT, AID_SHELL, 0, "system/xbin/*" },
228 { 00755, AID_ROOT, AID_SHELL, 0, "system/vendor/bin/*" },
229 { 00750, AID_ROOT, AID_SHELL, 0, "sbin/*" },
230 { 00755, AID_ROOT, AID_ROOT, 0, "bin/*" },
231 { 00750, AID_ROOT, AID_SHELL, 0, "init*" },
232 { 00750, AID_ROOT, AID_SHELL, 0, "charger*" },
233 { 00750, AID_ROOT, AID_SHELL, 0, "sbin/fs_mgr" },
234 { 00640, AID_ROOT, AID_SHELL, 0, "fstab.*" },
235 { 00644, AID_ROOT, AID_ROOT, 0, 0 },
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800236};
237
238static inline void fs_config(const char *path, int dir,
Nick Kraleviche9e74f32013-02-07 14:22:12 -0800239 unsigned *uid, unsigned *gid, unsigned *mode, uint64_t *capabilities)
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800240{
Nick Kraleviche9e74f32013-02-07 14:22:12 -0800241 const struct fs_path_config *pc;
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800242 int plen;
Doug Zongker08c370c2012-05-03 14:16:54 -0700243
Colin Cross04aaf5a2012-12-21 12:50:29 -0800244 if (path[0] == '/') {
245 path++;
246 }
247
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800248 pc = dir ? android_dirs : android_files;
249 plen = strlen(path);
250 for(; pc->prefix; pc++){
251 int len = strlen(pc->prefix);
252 if (dir) {
253 if(plen < len) continue;
254 if(!strncmp(pc->prefix, path, len)) break;
255 continue;
256 }
257 /* If name ends in * then allow partial matches. */
258 if (pc->prefix[len -1] == '*') {
259 if(!strncmp(pc->prefix, path, len - 1)) break;
260 } else if (plen == len){
261 if(!strncmp(pc->prefix, path, len)) break;
262 }
263 }
264 *uid = pc->uid;
265 *gid = pc->gid;
266 *mode = (*mode & (~07777)) | pc->mode;
Nick Kraleviche9e74f32013-02-07 14:22:12 -0800267 *capabilities = pc->capabilities;
Doug Zongker08c370c2012-05-03 14:16:54 -0700268
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800269#if 0
Doug Zongker08c370c2012-05-03 14:16:54 -0700270 fprintf(stderr,"< '%s' '%s' %d %d %o >\n",
The Android Open Source Projectdd7bc332009-03-03 19:32:55 -0800271 path, pc->prefix ? pc->prefix : "", *uid, *gid, *mode);
272#endif
273}
274#endif
275#endif