Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 83e6f260 authored by Tim Kilbourn's avatar Tim Kilbourn
Browse files

Allow inputflinger to have CAP_BLOCK_SUSPEND. 

Change-Id: I817707721786e9b920fef14ebe836fdcd65a8606
parent 187f6769

include/private/android_filesystem_capability.h

+3 −1
Original line number Diff line number Diff line
@@ -105,7 +105,9 @@ struct vfs_cap_data { 
#define CAP_MAC_ADMIN 33

#define CAP_SYSLOG 34

#define CAP_WAKE_ALARM 35

#define CAP_LAST_CAP CAP_WAKE_ALARM

#define CAP_BLOCK_SUSPEND 36

#define CAP_AUDIT_READ 37

#define CAP_LAST_CAP CAP_AUDIT_READ

#define cap_valid(x) ((x) >= 0 && (x) <= CAP_LAST_CAP)

#define CAP_TO_INDEX(x) ((x) >> 5)

#define CAP_TO_MASK(x) (1 << ((x) & 31))

include/private/android_filesystem_config.h

+1 −0
Original line number Diff line number Diff line
@@ -249,6 +249,7 @@ static const struct fs_path_config android_files[] = { 


    /* the following files have enhanced capabilities and ARE included in user builds. */

    { 00750, AID_ROOT,      AID_SHELL,     (1 << CAP_SETUID) | (1 << CAP_SETGID), "system/bin/run-as" },

    { 00700, AID_SYSTEM,    AID_SHELL,     (1 << CAP_BLOCK_SUSPEND), "system/bin/inputflinger" },



    { 00750, AID_ROOT,      AID_ROOT,      0, "system/bin/uncrypt" },

    { 00750, AID_ROOT,      AID_ROOT,      0, "system/bin/install-recovery.sh" },