blob: d8250c2d0463a8999a0fd4dd2ed47e91ea5287c0 [file] [log] [blame]
Tom Cherryc149ef72015-08-14 13:06:31 -07001service netd /system/bin/netd
2 class main
Jeff Vander Stoep85eb2112019-12-12 10:14:18 +01003 capabilities CHOWN DAC_OVERRIDE DAC_READ_SEARCH FOWNER IPC_LOCK KILL NET_ADMIN NET_BIND_SERVICE NET_RAW SETUID SETGID
Steven Morelanda93de122023-04-10 20:41:59 +00004 user root
Maciej Żenczykowski5cf00db2021-10-01 01:35:11 -07005 group root net_admin
Tom Cherryc149ef72015-08-14 13:06:31 -07006 socket dnsproxyd stream 0660 root inet
7 socket mdns stream 0660 root system
8 socket fwmarkd stream 0660 root inet
Nathan Harold601c3a02018-04-04 13:15:31 -07009 onrestart restart zygote
10 onrestart restart zygote_secondary
Lorenzo Colitti9ec46b32018-12-21 15:02:03 +090011 # b/121354779: netd itself is not updatable, but on startup it dlopen()s the resolver library
12 # from the DNS resolver APEX. Mark it as updatable so init won't start it until all APEX
13 # packages are ready.
14 updatable
Hungming Chen99aeade2022-01-16 17:25:15 +080015
16# Moved from external/android-clat/vendor-464xlat.rc. Since
17# clatd is modularized and shipped in apex, migrate the
18# clat vendor property to netd.
19#
20# Certain vendors disable 464xlat by setting a vendor property.
21# The connectivity code in the Tethering APEX needs to disable
22# 464xlat when the property is set, but it is only allowed to
23# access non-vendor system properties. So copy the property to
24# a property available to system APIs in android.sysprop.
25#
26# Arguably this script should live close to the code that uses
27# it, but scrips in APEXes are not allowed to use "on property".
28# So put it here close to clatd, which is at least related to
29# 464xlat.
30on property:persist.vendor.net.doxlat=true
31 setprop net.464xlat.cellular.enabled true
32
33on property:persist.vendor.net.doxlat=false
34 setprop net.464xlat.cellular.enabled false