diff options
| author | Nick Kralevich <nnk@google.com> | 2012-08-31 16:08:06 -0700 |
|---|---|---|
| committer | Nick Kralevich <nnk@google.com> | 2012-09-04 14:58:22 -0700 |
| commit | 812b19a425b8304ac9e5408cc8ceb9f363c72559 (patch) | |
| tree | 6463a4310d8e3f715988788833bfa51e6ea62689 /cmds/pm/src/com/android | |
| parent | e94831e5ed4aa3b1ebc5444cc1b16cdab8cb92f8 (diff) | |
| download | frameworks_base-812b19a425b8304ac9e5408cc8ceb9f363c72559.zip frameworks_base-812b19a425b8304ac9e5408cc8ceb9f363c72559.tar.gz frameworks_base-812b19a425b8304ac9e5408cc8ceb9f363c72559.tar.bz2 | |
installd: reduce privileges.
Make installd run with fewer privileges. This will help make
exploitation of installd based vulnerabilities more difficult
to perform.
installd now runs with the following privileges:
* CAP_DAC_OVERRIDE
* CAP_CHOWN
These two capabilities are needed to add and remove files
from application's home directories.
* CAP_SETUID
* CAP_SETGID
These permissions are needed to further drop privileges when
running dexopt as the application UID.
"installd" no longer runs with full root privileges. It cannot,
for example, mount and unmount filesystems, install modules,
perform direct I/O, etc.
Change-Id: Ib407e41e5e4c95f35a5c6a154812c5e8ae3006ed
Diffstat (limited to 'cmds/pm/src/com/android')
0 files changed, 0 insertions, 0 deletions