Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit a444a7ed authored by Treehugger Robot's avatar Treehugger Robot Committed by Automerger Merge Worker
Browse files

Merge "Update docs around capabilities and root processes" am: 583b616b am: 6cf486cd 

Original change: https://android-review.googlesource.com/c/platform/system/core/+/2356702



Change-Id: I9b64a590ceb2bca02251dc680d843e601391fb19
Signed-off-by: default avatarAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
parents dffda8e6 6cf486cd

init/README.md

+5 −3
Original line number Diff line number Diff line
@@ -195,8 +195,10 @@ runs the service. 
  capability without the "CAP\_" prefix, like "NET\_ADMIN" or "SETPCAP". See

  http://man7.org/linux/man-pages/man7/capabilities.7.html for a list of Linux

  capabilities.

  If no capabilities are provided, then all capabilities are removed from this service, even if it

  runs as root.

  If no capabilities are provided, then behaviour depends on the user the service runs under:

    * if it's root, then the service will run with all the capabitilies (note: whether the

        service can actually use them is controlled by selinux);

    * otherwise all capabilities will be dropped.



`class <name> [ <name>\* ]`

> Specify class names for the service.  All services in a
@@ -410,7 +412,7 @@ runs the service. 
  using this new mechanism, processes can use the user option to

  select their desired uid without ever running as root.

  As of Android O, processes can also request capabilities directly in their .rc

  files. See the "capabilities" option below.

  files. See the "capabilities" option above.



`writepid <file> [ <file>\* ]`

> Write the child's pid to the given files when it forks. Meant for