Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b0f1540f authored by Nick Kralevich's avatar Nick Kralevich
Browse files

run-as: Don't require CAP_DAC_READ_SEARCH 

This is a partial AOSP port of Google internal change
080427e4 .

Change-Id: I23a7edc808d227caf3862b035dc2ca39639d9d59
parent c8df252f

run-as/package.c

+18 −1
Original line number Diff line number Diff line
@@ -80,13 +80,30 @@ map_file(const char* filename, size_t* filesize) 
    struct stat  st;

    size_t  length = 0;

    void*   address = NULL;

    gid_t   oldegid;



    *filesize = 0;



    /*

     * Temporarily switch effective GID to allow us to read

     * the packages file

     */



    oldegid = getegid();

    if (setegid(AID_SYSTEM) < 0) {

        return NULL;

    }



    /* open the file for reading */

    fd = TEMP_FAILURE_RETRY(open(filename, O_RDONLY));

    if (fd < 0)

    if (fd < 0) {

        return NULL;

    }



    /* restore back to our old egid */

    if (setegid(oldegid) < 0) {

        goto EXIT;

    }



    /* get its size */

    ret = TEMP_FAILURE_RETRY(fstat(fd, &st));