Commit 87749450 authored Feb 14, 2018 by Luis Hector Chavez

init.rc: Add nodev,noexec,nosuid to /config

This change adds some additional flags to the /config mount. This is to
reduce the number of mounts with unnecessary privileges.

Bug: 73255020
Test: aosp_sailfish still boots
Test: CtsAppSecurityHostTestCases {ExternalStorageHostTest,StorageHostTest}
Merged-In: If3409d917cdf76a67ebfb7c4035a3ae8fee6189f
Change-Id: If3409d917cdf76a67ebfb7c4035a3ae8fee6189f

parent c415d00f

rootdir/init.rc

+1 −1

Original line number	Diff line number	Diff line
		@@ -85,7 +85,7 @@ on init
		mount tmpfs tmpfs /mnt mode=0755,uid=0,gid=1000
		restorecon_recursive /mnt

		mount configfs none /config
		mount configfs none /config nodev noexec nosuid
		chmod 0775 /config/sdcardfs
		chown system package_info /config/sdcardfs