Commit bc491e25 authored Dec 17, 2022 by David Brazdil

Change permissions of /data/misc/virtualizationservice

The folder is used for temporary files of virtualizationservice, with
a subfolder for each running VM. This wil continue to be the case but
each subfolder will be populated by a different instance of virtmgr,
running under the UID of the client (as opposed to system UID of
virtualizationservice).

To this end, change the permission mask of the root folder from 0770 to
0775. This gives non-system UIDs the permission to search the root
folder. This is necessary for the clients to be able to search their
own subfolder. It does not give them permission to read other
subfolders as those will be owned by different client UIDs.

Bug: 245727626
Test: atest -p packages/modules/Virtualization:avf-presubmit
Change-Id: Ie6e3be601ccb3b385f70bcf5b31bf8fff3aff8bc

parent bf6ac353

rootdir/init.rc

+1 −1

Original line number	Diff line number	Diff line
		@@ -839,7 +839,7 @@ on post-fs-data
		# Delete any stale files owned by the old virtualizationservice uid (b/230056726).
		chmod 0770 /data/misc/virtualizationservice
		exec - virtualizationservice system -- /bin/rm -rf /data/misc/virtualizationservice
		mkdir /data/misc/virtualizationservice 0770 system system
		mkdir /data/misc/virtualizationservice 0771 system system

		# /data/preloads uses encryption=None because it only contains preloaded
		# files that are public information, similar to the system image.