Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 70bcf8cf authored by Martijn Coenen's avatar Martijn Coenen
Browse files

Fix min uid/gid allowed for child zygotes. 

This should start at the app zygote isolated UID range, not the
regular isolated UID range.

Bug: 123758436
Test: atest CtsSeccompHostTestcases
      atest android.app.cts.ServiceTest#testActivityServiceBindingLru

Change-Id: Ic1b1ee02ab86a2e0f6a02525b466e6f5fdcdaf6c
parent 0671c44a

core/java/com/android/internal/os/ChildZygoteInit.java

+1 −1
Original line number Diff line number Diff line
@@ -102,7 +102,7 @@ public class ChildZygoteInit { 
        // are just isolated UIDs in the range, because for the webview zygote, there is no

        // single range that captures all possible isolated UIDs.

        // TODO(b/123615476) narrow this down

        if (uidGidMin < Process.FIRST_ISOLATED_UID) {

        if (uidGidMin < Process.FIRST_APP_ZYGOTE_ISOLATED_UID) {

            throw new RuntimeException("Passed in UID range does not map to isolated processes.");

        }