diff options
Diffstat (limited to 'cmds/keystore')
| -rw-r--r-- | cmds/keystore/keystore.cpp | 3 | ||||
| -rwxr-xr-x | cmds/keystore/test-keystore | 9 |
2 files changed, 6 insertions, 6 deletions
diff --git a/cmds/keystore/keystore.cpp b/cmds/keystore/keystore.cpp index bbd1a1b..4b4b9b9 100644 --- a/cmds/keystore/keystore.cpp +++ b/cmds/keystore/keystore.cpp @@ -708,11 +708,10 @@ static struct user { uid_t euid; uint32_t perms; } users[] = { - {AID_SYSTEM, ~0, ~GET}, + {AID_SYSTEM, ~0, ~0}, {AID_VPN, AID_SYSTEM, GET}, {AID_WIFI, AID_SYSTEM, GET}, {AID_ROOT, AID_SYSTEM, GET}, - {AID_KEYCHAIN, AID_SYSTEM, TEST | GET | SAW}, {~0, ~0, TEST | GET | INSERT | DELETE | EXIST | SAW}, }; diff --git a/cmds/keystore/test-keystore b/cmds/keystore/test-keystore index 82b276f..3be51b3 100755 --- a/cmds/keystore/test-keystore +++ b/cmds/keystore/test-keystore @@ -116,11 +116,12 @@ function test_basic() { expect "1 No error" expect "baz" - log "system does not have access to read any keys" + log "get baz" keystore system g baz - expect "6 Permission denied" - - log "however, root can read system user keys (as can wifi or vpn users)" + expect "1 No error" + expect "quux" + + log "root can read system user keys (as can wifi or vpn users)" keystore root g baz expect "1 No error" expect "quux" |