Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 04233a18 authored by Daniel Mentz's avatar Daniel Mentz Committed by Amit Pundir
Browse files

Revert "ANDROID: proc: smaps: Allow smaps access for CAP_SYS_RESOURCE"



This reverts commit ff8b80819cf4d76ff7fdfeb85d35f28f916105bd.

This fixes CVE-2017-0710.

SELinux allows more fine grained control: We grant processes that need
access to smaps CAP_SYS_PTRACE but prohibit them from using ptrace
attach().

Bug: 34951864
Bug: 36468447
Change-Id: I00a513188245a30bc63dcbdafbb9746bc6d9d6ff
Signed-off-by: default avatarDaniel Mentz <danielmentz@google.com>
parent 8160d0f1
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment