tequilaOS/platform_build_soong
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allowlist gcert and prodcertstatus binaries"

Browse source
This commit is contained in:
Treehugger Robot 2023-06-05 21:21:37 +00:00 committed by Gerrit Code Review
commit 300243ca3e
1 changed files with 23 additions and 21 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

44
ui/build/paths/config.go
View file

@ -86,27 +86,29 @@ func GetConfig(name string) PathConfig {
// This list specifies whether a particular binary from $PATH is allowed to be
// run during the build. For more documentation, see path_interposer.go .
var Configuration = map[string]PathConfig{
"bash": Allowed,
"dd": Allowed,
"diff": Allowed,
"dlv": Allowed,
"expr": Allowed,
"fuser": Allowed,
"getopt": Allowed,
"git": Allowed,
"hexdump": Allowed,
"jar": Allowed,
"java": Allowed,
"javap": Allowed,
"lsof": Allowed,
"openssl": Allowed,
"pstree": Allowed,
"rsync": Allowed,
"sh": Allowed,
"stubby": Allowed,
"tr": Allowed,
"unzip": Allowed,
"zip": Allowed,
"bash": Allowed,
"dd": Allowed,
"diff": Allowed,
"dlv": Allowed,
"expr": Allowed,
"fuser": Allowed,
"gcert": Allowed,
"getopt": Allowed,
"git": Allowed,
"hexdump": Allowed,
"jar": Allowed,
"java": Allowed,
"javap": Allowed,
"lsof": Allowed,
"openssl": Allowed,
"prodcertstatus": Allowed,
"pstree": Allowed,
"rsync": Allowed,
"sh": Allowed,
"stubby": Allowed,
"tr": Allowed,
"unzip": Allowed,
"zip": Allowed,
// Host toolchain is removed. In-tree toolchain should be used instead.
// GCC also can't find cc1 with this implementation.