Do not use BIND_INCLUDE_CAPABILITIES when bind PrintService
The BIND_INCLUDE_CAPABILITIES binding flag is used when a print service is bound by system_server. As a result, all permissions are passed down to the service, which is a security vulnerability. This patch adds a new flag do_not_include_capabilities that controls this behavior. Bug: 291281543 Test: build and run on Akita Flag: com.android.server.print.do_not_include_capabilities Change-Id: I9b2484fc5caa1681bbd80ada9200a01317fc22e9
Loading
Please register or sign in to comment