summaryrefslogtreecommitdiff
path: root/ondevice-signing/odsign.rc
blob: b95cf9dbe327850ad396d9db570651a3c9073945 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
service odsign /system/bin/odsign
    class core
    user root
    group system
    disabled # does not start with the core class
    # We need SYS_NICE in order to allow the crosvm child process to use it.
    # (b/322197421). odsign itself never uses it (and isn't allowed to by
    # SELinux).
    capabilities SYS_NICE

# Note that odsign is not oneshot, but stopped manually when it exits. This
# ensures that if odsign crashes during a module update, apexd will detect
# those crashes and roll back the update.