实例分析init.rc的语法

1# Copyright (C) 2012 The Android Open Source Project
2# Copyright (C) 
3# Copyright (C) 
4#
5# IMPORTANT: Do not create world writable files or directories.
6# This is a common source of Android security bugs.
7#
8
9import /init.${ro.hardware}.rc  //import <filename> : 包含其他的*.rc，类似include
10import /init.usb.rc
11import /init.trace.rc
12
13on early-init     //最先做 其中的action， 开始early-init 段
14    # Set init and its forked children's oom_adj.
15    write /proc/1/oom_adj -16  //直接写入procfs
16
17    start ueventd   //启动一个服务，注意ueventd 必须是一个service,在359行有定义
18
19# create mountpoints
20    mkdir /mnt 0775 root system //创建目录，具体用法与shell中的mkdir命令一样
21
22on init  //开始init段，其中的action在 early-init,property-init后执行
23
24sysclktz 0  //设置系统时钟，如果是0表示用GMT的时钟ticks
25
26loglevel 3  //log的输出级别［0，7］，控制的kernel的log输出
27
28# setup the global environment 
29    export PATH /sbin:/vendor/bin:/system/sbin:/system/bin:/system/xbin  //export,shell命令，设置全局环境变量
30    export LD_LIBRARY_PATH /vendor/lib:/system/lib
31    export ANDROID_BOOTLOGO 1
32    export ANDROID_ROOT /system
33    export ANDROID_ASSETS /system/app
34    export ANDROID_DATA /data
35    export ASEC_MOUNTPOINT /mnt/asec
36    export LOOP_MOUNTPOINT /mnt/obb
37    export BOOTCLASSPATH /system/framework/core.jar:/system/framework/core-junit.jar:/system/framework/bouncycastle.jar:/system/framework/ext.jar:/system/framework/framework.jar:/system/framework/framework_ext.jar:/system/framework/android.policy.jar:/system/framework/services.jar:/system/framework/apache-xml.jar
38
39# Backward compatibility
40    symlink /system/etc /etc  //创建一个指向/system/etc的软连接/etc, 也就是/etc目录实际上指向/system/etc
41    symlink /sys/kernel/debug /d
42
43# Right now vendor lives on the same filesystem as system,
44# but someday that may change.
45    symlink /system/vendor /vendor
46
47# Create cgroup mount point for cpu accounting
48    mkdir /acct
49    mount cgroup none /acct cpuacct //mount <type> <device> <dir> ［mountoption］ 把device(none)挂载到type为cgroup 的文件系统/acct下
                                      //其中<device>可以是以mtd@name形式指定的一个mtd块设备. mountoption可以是mode=0755,gid=1000
50    mkdir /acct/uid
51
52    mkdir /system
53    mkdir /data 0771 system system
54    mkdir /cache 0770 system cache
55    mkdir /config 0500 root root
56
57    # Directory for putting things only root should see.
58    mkdir /mnt/secure 0700 root root
59
60    # Directory for staging bindmounts
61    mkdir /mnt/secure/staging 0700 root root
62
63    # Directory-target for where the secure container
64    # imagefile directory will be bind-mounted
65    mkdir /mnt/secure/asec  0700 root root
66
67    # Secure container public mount points.
68    mkdir /mnt/asec  0700 root system
69    mount tmpfs tmpfs /mnt/asec mode=0755,gid=1000
70
71    # Filesystem image public mount points.
72    mkdir /mnt/obb 0700 root system
73    mount tmpfs tmpfs /mnt/obb mode=0755,gid=1000
74
75    write /proc/sys/kernel/panic_on_oops 1
76    write /proc/sys/kernel/hung_task_timeout_secs 0
77    write /proc/cpu/alignment 4
78    write /proc/sys/kernel/sched_latency_ns 10000000
79    write /proc/sys/kernel/sched_wakeup_granularity_ns 2000000
80    write /proc/sys/kernel/sched_compat_yield 1
81    write /proc/sys/kernel/sched_child_runs_first 0
82    write /proc/sys/kernel/randomize_va_space 2
83    write /proc/sys/kernel/kptr_restrict 2
84    write /proc/sys/kernel/dmesg_restrict 1
85    write /proc/sys/vm/mmap_min_addr 32768
86    write /proc/sys/kernel/sched_rt_runtime_us 950000
87    write /proc/sys/kernel/sched_rt_period_us 1000000
88
89# Create cgroup mount points for process groups
90    mkdir /dev/cpuctl
91    mount cgroup none /dev/cpuctl cpu
92    chown system system /dev/cpuctl   //改变目录（/dev/cpuctl）的使用群体为system
93    chown system system /dev/cpuctl/tasks
94    chmod 0660 /dev/cpuctl/tasks      //改变文件（/dev/cpuctl/tasks）的使用权限为0660
95    write /dev/cpuctl/cpu.shares 1024
96    write /dev/cpuctl/cpu.rt_runtime_us 950000
97    write /dev/cpuctl/cpu.rt_period_us 1000000
98
99    mkdir /dev/cpuctl/apps
100    chown system system /dev/cpuctl/apps/tasks
101    chmod 0666 /dev/cpuctl/apps/tasks
102    write /dev/cpuctl/apps/cpu.shares 1024
103    write /dev/cpuctl/apps/cpu.rt_runtime_us 800000
104    write /dev/cpuctl/apps/cpu.rt_period_us 1000000
105
106    mkdir /dev/cpuctl/apps/bg_non_interactive
107    chown system system /dev/cpuctl/apps/bg_non_interactive/tasks
108    chmod 0666 /dev/cpuctl/apps/bg_non_interactive/tasks
109    # 5.0 %
110    write /dev/cpuctl/apps/bg_non_interactive/cpu.shares 52
111    write /dev/cpuctl/apps/bg_non_interactive/cpu.rt_runtime_us 700000
112    write /dev/cpuctl/apps/bg_non_interactive/cpu.rt_period_us 1000000
113
114# Allow everybody to read the xt_qtaguid resource tracking misc dev.
115# This is needed by any process that uses socket tagging.
116    chmod 0644 /dev/xt_qtaguid
117
118on fs  //??????
119# mount mtd partitions
120    # Mount /system rw first to give the filesystem a chance to save a checkpoint
121    mount yaffs2 mtd@system /system
122    mount yaffs2 mtd@system /system ro remount
123    mount yaffs2 mtd@userdata /data nosuid nodev
124    mount yaffs2 mtd@cache /cache nosuid nodev
125
126on post-fs
127    # once everything is setup, no need to modify /
128    mount rootfs rootfs / ro remount
129
130    # We chown/chmod /cache again so because mount is run as root + defaults
131    chown system cache /cache
132    chmod 0770 /cache
133
134    # This may have been created by the recovery system with odd permissions
135    mkdir /cache/recovery
136    chown system cache /cache/recovery
137    chmod 0770 /cache/recovery
138
139    #change permissions on vmallocinfo so we can grab it from bugreports
140    chown root log /proc/vmallocinfo
141    chmod 0440 /proc/vmallocinfo
142
143    #change permissions on kmsg & sysrq-trigger so bugreports can grab kthread stacks
144    chown root system /proc/kmsg
145    chmod 0440 /proc/kmsg
146    chown root system /proc/sysrq-trigger
147    chmod 0220 /proc/sysrq-trigger
148
149    # create the lost+found directories, so as to enforce our permissions
150    # Moved to init.target.rc in the Sony product git
151    # mkdir /cache/lost+found 0770 root root
152
153on post-fs-data
154    # We chown/chmod /data again so because mount is run as root + defaults
155    chown system system /data
156    chmod 0771 /data
157
158    # Create dump dir and collect dumps.
159    # Do this before we mount cache so eventually we can use cache for
160    # storing dumps on platforms which do not have a dedicated dump partition.
161    mkdir /data/dontpanic 0750 root log
162
163    # Collect apanic data, free resources and re-arm trigger
164    copy /proc/apanic_console /data/dontpanic/apanic_console
165    chown root log /data/dontpanic/apanic_console
166    chmod 0640 /data/dontpanic/apanic_console
167
168    copy /proc/apanic_threads /data/dontpanic/apanic_threads
169    chown root log /data/dontpanic/apanic_threads
170    chmod 0640 /data/dontpanic/apanic_threads
171
172    write /proc/apanic_console 1
173
174    # create basic filesystem structure
175    mkdir /data/misc 01771 system misc
176    mkdir /data/misc/bluetoothd 0770 bluetooth bluetooth
177    mkdir /data/misc/bluetooth 0770 system system
178    mkdir /data/misc/keystore 0700 keystore keystore
179    mkdir /data/misc/keychain 0771 system system
180    mkdir /data/misc/vpn 0770 system vpn
181    mkdir /data/misc/systemkeys 0700 system system
182    # give system access to wpa_supplicant.conf for backup and restore
183    mkdir /data/misc/wifi 0770 wifi wifi
184    chmod 0660 /data/misc/wifi/wpa_supplicant.conf
185    mkdir /data/local 0751 root root
186    chmod 2770 /data/radio
187
188    # For security reasons, /data/local/tmp should always be empty.
189    # Do not place files or directories in /data/local/tmp
190    mkdir /data/local/tmp 0771 shell shell
191    mkdir /data/data 0771 system system
192    mkdir /data/app-private 0771 system system
193    mkdir /data/app-asec 0700 root root
194    mkdir /data/app 0771 system system
195    mkdir /data/property 0700 root root
196    mkdir /data/ssh 0750 root shell
197    mkdir /data/ssh/empty 0700 root root
198
199    # create dalvik-cache, so as to enforce our permissions
200    mkdir /data/dalvik-cache 0771 system system
201
202    # create resource-cache and double-check the perms
203    mkdir /data/resource-cache 0771 system system
204    chown system system /data/resource-cache
205    chmod 0771 /data/resource-cache
206
207    # create the lost+found directories, so as to enforce our permissions
208    # Moved to init.target.rc in the Sony product git
209    # mkdir /data/lost+found 0770 root root
210
211    # create directory for DRM plug-ins - give drm the read/write access to
212    # the following directory.
213    mkdir /data/drm 0770 drm drm
214
215    # If there is no fs-post-data action in the init.<device>.rc file, you
216    # must uncomment this line, otherwise encrypted filesystems
217    # won't work.
218    # Set indication (checked by vold) that we have finished this action
219    #setprop vold.post_fs_data_done 1
220
221on boot //开始boot段，其中的action在 early-init,property-init,init后执行
222# basic network init
223    ifup lo                 //启动网路接口 lo, 但lo是啥接口？
224    hostname localhost      //设置手机主机名为localhost
225    domainname localdomain  //设置域名localdomain
226
227# set RLIMIT_NICE to allow priorities from 19 to -20
228    setrlimit 13 40 40
229
230# Memory management.  Basic kernel parameters, and allow the high
231# level system server to be able to adjust the kernel OOM driver
232# parameters to match how it is managing things.
233    write /proc/sys/vm/overcommit_memory 1
234    write /proc/sys/vm/min_free_order_shift 4
235    chown root system /sys/module/lowmemorykiller/parameters/adj
236    chmod 0664 /sys/module/lowmemorykiller/parameters/adj
237    chown root system /sys/module/lowmemorykiller/parameters/minfree
238    chmod 0664 /sys/module/lowmemorykiller/parameters/minfree
239
240    # Tweak background writeout
241    write /proc/sys/vm/dirty_expire_centisecs 200
242    write /proc/sys/vm/dirty_background_ratio  5
243
244    # Permissions for System Server and daemons.
245    chown radio system /sys/android_power/state
246    chown radio system /sys/android_power/request_state
247    chown radio system /sys/android_power/acquire_full_wake_lock
248    chown radio system /sys/android_power/acquire_partial_wake_lock
249    chown radio system /sys/android_power/release_wake_lock
250    chown system system /sys/power/state
251    chown system system /sys/power/autosleep
252    chown system system /sys/power/wakeup_count
253    chown radio system /sys/power/wake_lock
254    chown radio system /sys/power/wake_unlock
255    chmod 0660 /sys/power/state
256    chmod 0660 /sys/power/wake_lock
257    chmod 0660 /sys/power/wake_unlock
258
259    chown system system /sys/devices/system/cpu/cpufreq/interactive/timer_rate
260    chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/timer_rate
261    chown system system /sys/devices/system/cpu/cpufreq/interactive/min_sample_time
262    chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/min_sample_time
263    chown system system /sys/devices/system/cpu/cpufreq/interactive/hispeed_freq
264    chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/hispeed_freq
265    chown system system /sys/devices/system/cpu/cpufreq/interactive/go_hispeed_load
266    chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/go_hispeed_load
267    chown system system /sys/devices/system/cpu/cpufreq/interactive/above_hispeed_delay
268    chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/above_hispeed_delay
269    chown system system /sys/devices/system/cpu/cpufreq/interactive/boost
270    chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/boost
271    chown system system /sys/devices/system/cpu/cpufreq/interactive/boostpulse
272    chown system system /sys/devices/system/cpu/cpufreq/interactive/input_boost
273    chmod 0660 /sys/devices/system/cpu/cpufreq/interactive/input_boost
274
275    # Assume SMP uses shared cpufreq policy for all CPUs
276    chown system system /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
277    chmod 0660 /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
278
279    chown system system /sys/class/timed_output/vibrator/enable
280    chown system system /sys/class/leds/keyboard-backlight/brightness
281    chown system system /sys/class/leds/lcd-backlight/brightness
282    chown system system /sys/class/leds/button-backlight/brightness
283    chown system system /sys/class/leds/jogball-backlight/brightness
284    chown system system /sys/class/leds/red/brightness
285    chown system system /sys/class/leds/green/brightness
286    chown system system /sys/class/leds/blue/brightness
287    chown system system /sys/class/leds/red/device/grpfreq
288    chown system system /sys/class/leds/red/device/grppwm
289    chown system system /sys/class/leds/red/device/blink
290    chown system system /sys/class/leds/red/brightness
291    chown system system /sys/class/leds/green/brightness
292    chown system system /sys/class/leds/blue/brightness
293    chown system system /sys/class/leds/red/device/grpfreq
294    chown system system /sys/class/leds/red/device/grppwm
295    chown system system /sys/class/leds/red/device/blink
296    chown system system /sys/class/timed_output/vibrator/enable
297    chown system system /sys/module/sco/parameters/disable_esco
298    chown system system /sys/kernel/ipv4/tcp_wmem_min
299    chown system system /sys/kernel/ipv4/tcp_wmem_def
300    chown system system /sys/kernel/ipv4/tcp_wmem_max
301    chown system system /sys/kernel/ipv4/tcp_rmem_min
302    chown system system /sys/kernel/ipv4/tcp_rmem_def
303    chown system system /sys/kernel/ipv4/tcp_rmem_max
304    chown root radio /proc/cmdline
305
306# Define TCP buffer sizes for various networks
307#   ReadMin, ReadInitial, ReadMax, WriteMin, WriteInitial, WriteMax,
308    setprop net.tcp.buffersize.default 4096,87380,110208,4096,16384,110208
309    setprop net.tcp.buffersize.wifi    524288,1048576,2097152,262144,524288,1048576
310    setprop net.tcp.buffersize.lte     524288,1048576,2097152,262144,524288,1048576
311    setprop net.tcp.buffersize.umts    4094,87380,110208,4096,16384,110208
312    setprop net.tcp.buffersize.hspa    4094,87380,1220608,4096,16384,1220608
313    setprop net.tcp.buffersize.hsupa   4094,87380,1220608,4096,16384,1220608
314    setprop net.tcp.buffersize.hsdpa   4094,87380,1220608,4096,16384,110208
315    setprop net.tcp.buffersize.hspap   4094,87380,2097152,4096,16384,1220608
316    setprop net.tcp.buffersize.edge    4093,26280,35040,4096,16384,35040
317    setprop net.tcp.buffersize.gprs    4092,8760,11680,4096,8760,11680
318    setprop net.tcp.buffersize.evdo_b  4094,87380,262144,4096,16384,262144
319
320# Assign TCP buffer thresholds to be ceiling value of technology maximums
321# Increased technology maximums should be reflected here.
322    write /proc/sys/net/core/rmem_max  2097152
323    write /proc/sys/net/core/wmem_max  1220608
324
325# Set this property so surfaceflinger is not started by system_init
326    setprop system_init.startsurfaceflinger 0
327
328    class_start core  //如果所有的class类别为core 的服务没有运行，则马上启动它们
329    class_start main
330
331on nonencrypted
332    class_start late_start
333
334on charger
335    class_start charger
336
337on property:vold.decrypt=trigger_reset_main
338    class_reset main
339
340on property:vold.decrypt=trigger_load_persist_props
341    load_persist_props
342
343on property:vold.decrypt=trigger_post_fs_data
344    trigger post-fs-data   //触发一个事件post-fs-data， 该事件是用on post-fs-data定义的，位于后面
345
346on property:vold.decrypt=trigger_restart_min_framework
347    class_start main
348
349on property:vold.decrypt=trigger_restart_framework
350    class_start main
351    class_start late_start
352
353on property:vold.decrypt=trigger_shutdown_framework
354    class_reset late_start
355    class_reset main
356
357## Daemon processes to be run by init.
358##
359service ueventd /sbin/ueventd  //表示service段，语法: service <服务名字> <服务对应的执行文件>; 声明服务名字为ueventd的服务，其具体执行路径
                                  //为/sbin/ueventd
360    class core                 //表示属于class 类别为core 的服务,如果没有设置，则表示该服务的默认类别为default
361    critical                   //
362
363service console /system/bin/sh
364    class core
365    console
366    disabled
367    user shell
368    group log
369
370on property:ro.debuggable=1    //如果用setprop命令设置属性 ro.debuggable变成1,则触发下面的start console
371    start console
372
373# adbd is controlled via property triggers in init.<platform>.usb.rc
374service adbd /sbin/adbd
375    class core
376    disabled      //该服务不能通过启动一类服务来启动，比如 class_start core来启动，只能以单独的名字来启动 start adbd.
377
378# adbd on at boot in emulator
379on property:ro.kernel.qemu=1
380    start adbd
381
382service servicemanager /system/bin/servicemanager
383    class core
384    user system        //在该服务启动前，把用户名切换到 system,默认是root
385    group system       //在该服务启动前，把组名切换到 system.
386    critical           //说明该服务是个对于设备很关键的服务，如果4分钟内退出大于4次，则系统将重启并进入recovery恢复模式
387    onrestart exec /system/bin/sync  //当该服务重启时，执行后面的命令 exec
                                     //exec创建和执行一个程序（/system/bin/sync），在程序完全执行完之前，init会被阻塞。所以极有可能引起init卡死
388    onrestart write /proc/sysrq-trigger c
389
390service vold /system/bin/vold
391    class core
392    socket vold stream 0660 root mount //语法：socket <name> <type> <perm> <user> <group>, 创建一个名字为vold<name>,类别为stream<type>
                                          //访问权限为0660<perm> 用户为root,用户组为mount
393    ioprio be 2
394
395service netd /system/bin/netd
396    class main
397    socket netd stream 0660 root system
398    socket dnsproxyd stream 0660 root inet
399    socket mdns stream 0660 root system
400
401service debuggerd /system/bin/debuggerd
402    class main
403
404service ril-daemon /system/bin/rild
405    class main
406    socket rild stream 660 root radio
407    socket rild-debug stream 660 radio system
408    user root
409    group radio cache inet misc audio sdcard_r sdcard_rw qcom_oncrpc diag qcom_diag log
410
411service surfaceflinger /system/bin/surfaceflinger
412    class main
413    user system
414    group graphics
415    onrestart exec /system/bin/sync
416    onrestart write /proc/sysrq-trigger c
417
418service zygote /system/bin/app_process -Xzygote /system/bin --zygote --start-system-server
419    class main
420    socket zygote stream 660 root system
421    onrestart exec /system/bin/sync
422    onrestart write /proc/sysrq-trigger c
423
424service drm /system/bin/drmserver
425    class main
426    user drm
427    group drm system inet drmrpc sdcard_r
428
429service media /system/bin/mediaserver
430    class main
431    user media
432    group system audio camera inet net_bt net_bt_admin net_bw_acct drmrpc input qcom_diag
433    ioprio rt 4
434
435service bootanim /system/bin/bootanimation
436    class main
437    user graphics
438    group graphics
439    disabled
440    oneshot    //该服务只启动一次，退出后不再运行
441
442service dbus /system/bin/dbus-daemon --system --nofork
443    class main
444    socket dbus stream 660 bluetooth bluetooth
445    user bluetooth
446    group bluetooth net_bt_admin
447
448service bluetoothd /system/bin/logwrapper /system/bin/bluetoothd -n
449    class main
450    socket bluetooth stream 660 bluetooth bluetooth
451    socket dbus_bluetooth stream 660 bluetooth bluetooth
452    # init.rc does not yet support applying capabilities, so run as root and
453    # let bluetoothd drop uid to bluetooth with the right linux capabilities
454    group bluetooth net_bt_admin misc
455    disabled
456
457service installd /system/bin/installd
458    class main
459    socket installd stream 600 system system
460
461service flash_recovery /system/etc/install-recovery.sh
462    class main
463    oneshot
464
465service racoon /system/bin/racoon
466    class main
467    socket racoon stream 600 system system
468    # IKE uses UDP port 500. Racoon will setuid to vpn after binding the port.
469    group vpn net_admin inet
470    disabled
471    oneshot
472
473service mtpd /system/bin/mtpd
474    class main
475    socket mtpd stream 600 system system
476    user vpn
477    group vpn net_admin inet net_raw
478    disabled
479    oneshot
480
481service keystore /system/bin/keystore /data/misc/keystore
482    class main
483    user keystore
484    group keystore drmrpc
485    socket keystore stream 666
486
487service dumpstate /system/bin/dumpstate -s
488    class main
489    socket dumpstate stream 0660 shell log
490    disabled
491    oneshot
492
493service sshd /system/bin/start-ssh
494    class main
495    disabled
496
497service mdnsd /system/bin/mdnsd
498    class main
499    user mdnsr
500    group inet net_raw
501    socket mdnsd stream 0660 mdnsr inet
502    disabled
503    oneshot