Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 4109c433 authored by Mark Salyzyn's avatar Mark Salyzyn Committed by android-build-merger
Browse files

logd: set executable's capabilities in file system 

am: 0d2a1dcb

Change-Id: Icb3fb18ee96be0ae250be153a1600eb4e8cd8408
parents 1259d9ea 0d2a1dcb

libcutils/fs_config.c

+19 −7
Original line number Diff line number Diff line
@@ -140,26 +140,38 @@ static const struct fs_path_config android_files[] = { 
    { 06755, AID_ROOT,      AID_ROOT,      0, "system/xbin/procmem" },



    /* the following files have enhanced capabilities and ARE included in user builds. */

    { 00750, AID_ROOT,      AID_SHELL,     CAP_MASK_LONG(CAP_SETUID) | CAP_MASK_LONG(CAP_SETGID), "system/bin/run-as" },

    { 00700, AID_SYSTEM,    AID_SHELL,     CAP_MASK_LONG(CAP_BLOCK_SUSPEND), "system/bin/inputflinger" },

    { 00550, AID_LOGD,      AID_LOGD,      CAP_MASK_LONG(CAP_SYSLOG) |

                                           CAP_MASK_LONG(CAP_AUDIT_CONTROL) |

                                           CAP_MASK_LONG(CAP_SETGID),

                                              "system/bin/logd" },

    { 00750, AID_ROOT,      AID_SHELL,     CAP_MASK_LONG(CAP_SETUID) |

                                           CAP_MASK_LONG(CAP_SETGID),

                                              "system/bin/run-as" },

    { 00700, AID_SYSTEM,    AID_SHELL,     CAP_MASK_LONG(CAP_BLOCK_SUSPEND),

                                              "system/bin/inputflinger" },



    /* Support FIFO scheduling mode in SurfaceFlinger. */

    { 00755, AID_SYSTEM,    AID_GRAPHICS,     CAP_MASK_LONG(CAP_SYS_NICE), "system/bin/surfaceflinger" },



    /* Support hostapd administering a network interface. */

    { 00755, AID_WIFI,      AID_WIFI,      CAP_MASK_LONG(CAP_NET_ADMIN) |

                                          CAP_MASK_LONG(CAP_NET_RAW),    "system/bin/hostapd" },

                                           CAP_MASK_LONG(CAP_NET_RAW),

                                              "system/bin/hostapd" },



    /* Support wifi_hal_legacy administering a network interface. */

    { 00755, AID_WIFI,      AID_WIFI,     CAP_MASK_LONG(CAP_NET_ADMIN) | CAP_MASK_LONG(CAP_NET_RAW),    "system/bin/hw/android.hardware.wifi@1.0-service" },

    { 00755, AID_WIFI,      AID_WIFI,      CAP_MASK_LONG(CAP_NET_ADMIN) |

                                           CAP_MASK_LONG(CAP_NET_RAW),

                                              "system/bin/hw/android.hardware.wifi@1.0-service" },



    /* A non-privileged zygote that spawns isolated processes for web rendering. */

    { 0750,  AID_ROOT,      AID_ROOT,      CAP_MASK_LONG(CAP_SETUID) |

                                           CAP_MASK_LONG(CAP_SETGID) |

                                           CAP_MASK_LONG(CAP_SETPCAP), "system/bin/webview_zygote32" },

                                           CAP_MASK_LONG(CAP_SETPCAP),

                                              "system/bin/webview_zygote32" },

    { 0750,  AID_ROOT,      AID_ROOT,      CAP_MASK_LONG(CAP_SETUID) |

                                           CAP_MASK_LONG(CAP_SETGID) |

                                           CAP_MASK_LONG(CAP_SETPCAP), "system/bin/webview_zygote64" },

                                           CAP_MASK_LONG(CAP_SETPCAP),

                                              "system/bin/webview_zygote64" },



    { 00750, AID_ROOT,      AID_ROOT,      0, "system/bin/uncrypt" },

    { 00750, AID_ROOT,      AID_ROOT,      0, "system/bin/install-recovery.sh" },