Merge "zygote: don't drop CAP_SYS_PTRACE from the bounding set." (e8018105) · Commits · e / os / android_frameworks_base

core/jni/com_android_internal_os_Zygote.cpp

+5 −0

Original line number	Diff line number	Diff line
		@@ -247,6 +247,11 @@ static void EnableKeepCapabilities(JNIEnv* env) {

		static void DropCapabilitiesBoundingSet(JNIEnv* env) {
		for (int i = 0; prctl(PR_CAPBSET_READ, i, 0, 0, 0) >= 0; i++) {
		// Keep CAP_SYS_PTRACE in our bounding set so crash_dump can gain it.
		if (i == CAP_SYS_PTRACE) {
		continue;
		}

		int rc = prctl(PR_CAPBSET_DROP, i, 0, 0, 0);
		if (rc == -1) {
		if (errno == EINVAL) {