No description
Find a file
Zim 6ca090e6b0 Harden /mnt/pass_through permission bits
It previously had 0755 permission bits

With such permissive bits, an unauthorized app can access a file using
the /mnt/pass_through path for instance even if access via /storage
would have been restricted.

It is now 0700

TODO: Change ACL for /mnt/user from 0755 to 0700 in vold only when
FUSE flag is on. Changing it with FUSE off breaks accessing /sdcard
because /sdcard is eventually a symlink to /mnt/user/0/primary

Test: adb shell ls -d /mnt/pass_through
Bug: 135341433
Change-Id: I3ea9655c6b8c6b4f847b34a2d3b96784a8f4a160
2020-01-22 17:54:45 +00:00
adb Merge "adb: fix adb connect help typo." 2020-01-09 04:34:27 +00:00
base Fix SEGV in libziparchive with malformed zip file. 2019-12-17 08:39:09 -08:00
bootstat Simply reboot if the boringssl self test fails 2019-09-19 14:59:07 -07:00
cli-test cli-test: a tool for testing command-line programs. 2019-12-13 12:23:51 -08:00
code_coverage configs for jailed procs to dump code coverage data 2019-11-08 08:20:29 -08:00
cpio Switch from dist-for-goals to dist in Android.bp 2018-11-19 23:06:12 -08:00
debuggerd debuggerd: switch to using platform headers for DEBUGGER_SIGNAL. 2019-12-17 16:36:05 -08:00
deprecated-adf adf: rename. 2019-02-14 16:30:24 -08:00
diagnose_usb Build adbd for recovery 2018-05-24 14:11:11 +09:00
fastboot Add fuzzy_fastboot to vts-core suite 2020-01-06 15:52:10 -08:00
fs_mgr SnapshotManager expose no space error 2020-01-07 14:20:44 -08:00
gatekeeperd Remove libhwbinder/libhidltransport deps 2019-09-05 14:17:42 -07:00
healthd Merge "healthd: Fix incorrect return check" 2019-11-07 21:18:59 +00:00
include Move android_filesystem_config.h => fs_config.h 2017-08-02 16:31:19 -07:00
init Merge "InitFatalReboot: Panic the system if init_fatal_panic is "true"" 2020-01-09 02:11:52 +00:00
janitors Add the two best build system janitors. 2019-03-25 10:25:13 -07:00
libappfuse Close /dev/fuse FD before calling onClosed 2019-05-31 17:06:52 +01:00
libasyncio Revert "Mark libs as double_loadable" 2019-03-11 14:10:34 +00:00
libbacktrace libbacktrace: Fix clang-tidy warning 2019-09-09 18:39:08 +02:00
libbinderwrapper Make libbinderwrapper available in /vendor partition 2018-04-06 08:41:21 +09:00
libcrypto_utils Convert more modules to Android.bp 2018-10-31 21:53:37 -07:00
libcutils SurfaceFlinger: migrate capabilities to surfaceflinger.rc 2020-01-08 19:35:57 +00:00
libdiskconfig Rename target.linux[_x86[_64]] to target.linux_glibc[_x86[_64]] 2017-10-02 10:44:29 -07:00
libgrallocusage Replace -Weverything with -Wextra 2019-11-08 13:09:00 -08:00
libkeyutils Refactor mini-keyctl and split a static library 2019-09-26 10:45:38 -07:00
liblog CtsLiblogTestCases secondary_user 2020-01-06 09:58:07 -08:00
libmetricslogger DO NOT MERGE - Merge pie-platform-release (PPRL.181205.001) into master 2018-12-11 14:46:12 -08:00
libmodprobe libmodprobe: parse kernel command line for module options 2019-12-27 13:39:23 -08:00
libnetutils Properly size response buffer in ifc_act_on_address 2019-12-02 17:37:39 +09:00
libpackagelistparser Add require_root to adbd_test and libpackagelistparser_test 2019-09-24 09:13:32 -07:00
libpixelflinger Mark gglMulx and gglMulAddx as always_inline 2019-02-14 11:59:48 -08:00
libprocessgroup init: always kill oneshot services' process groups. 2019-11-19 15:13:17 -08:00
libprocinfo Add ReadMapFileAsyncSafe function. 2019-08-23 10:07:44 -07:00
libqtaguid Redirect qtaguid native call to netd fwmark client 2017-11-09 18:02:22 -08:00
libsparse libsparse: fix memory leak in output_file_close() 2019-11-12 18:52:29 +08:00
libstats Merge "Fix bug in stats_event_benchmark" 2020-01-07 00:43:49 +00:00
libsuspend Remove libsuspend from VNDK. 2018-08-14 13:39:55 -07:00
libsync Rename # vndk tag to # llndk 2019-11-13 14:32:44 +09:00
libsystem Merge changes I8186718c,I8d6f33e9,I56fe5e11,Ie4004c98,I531d3d60, ... am: b26696e2dd 2019-05-21 02:24:56 -07:00
libsysutils Copy necessary ipt_ULOG.h structure to source. 2019-12-10 12:53:39 -08:00
libunwindstack Fix handling of possible bad gnu_debugdata_size. 2019-12-19 16:48:15 -08:00
libusbhost Revert "Mark libs as double_loadable" 2019-03-11 14:10:34 +00:00
libutils DO NOT MERGE - Merge QQ1A.200105.003 into stage-aosp-master 2020-01-02 13:29:54 -08:00
libvndksupport Stop using weak symbols in libvndksupport. 2019-12-17 17:52:05 -08:00
libziparchive Merge "Fix SEGV in libziparchive with malformed zip file." 2019-12-18 16:14:54 +00:00
llkd llkd: do not call sync() 2019-01-10 12:52:35 -08:00
logcat logcat: remove unused enum and #def 2019-12-09 13:29:39 -08:00
logd CtsLogdTestCases secondary_user 2020-01-06 09:52:54 -08:00
logwrapper logwrapper: update benchmark and remove old functions 2019-09-28 07:27:26 -07:00
property_service Require 'exact', 'prefix', or '' for match operation in property_contexts 2019-12-11 07:56:51 -08:00
qemu_pipe Build adbd for recovery 2018-05-24 14:11:11 +09:00
reboot adb: replace reboot service with exec of /system/bin/reboot. 2019-10-23 14:33:36 -07:00
rootdir Harden /mnt/pass_through permission bits 2020-01-22 17:54:45 +00:00
run-as run-as: improve diagnostics on failure. 2019-03-13 11:16:03 -07:00
sdcard Move layout_version to /data/misc/installd 2019-08-21 10:12:18 -07:00
set-verity-state Revert "remount: Remove the "backing" parameter to fs_mgr_overlayfs_setup." 2019-12-17 08:53:13 +00:00
shell_and_utilities shell-and-utilities: add bc. 2019-12-11 15:58:38 -08:00
storaged Remove libhwbinder/libhidltransport deps 2019-09-05 14:17:42 -07:00
toolbox toolbox: add modprobe 2019-08-06 13:58:13 -07:00
trusty Merge "trusty:storageproxyd: Add ufs to parse_dev_type" 2020-01-04 00:10:57 +00:00
usbd Remove libhwbinder/libhidltransport deps 2019-09-05 14:17:42 -07:00
watchdogd Move watchdogd out of init 2018-08-02 12:25:58 -07:00
.clang-format Add a 2 width option of clang format. 2017-03-10 13:01:39 -08:00
.clang-format-2 Move clang-formats to build. 2019-01-18 14:26:33 -08:00
.clang-format-4 Move clang-formats to build. 2019-01-18 14:26:33 -08:00
.gitignore Ignore adb/*.pyc files 2015-08-11 12:59:58 -07:00
Android.bp Export android_filesystem_config.h as a filegroup 2017-01-17 18:20:28 -08:00
CleanSpec.mk Move adbd to an apex. 2019-11-04 15:52:16 -08:00
MODULE_LICENSE_APACHE2
NOTICE
OWNERS Move per-file OWNERS directives to their directories. 2018-06-06 11:49:40 +09:00
PREUPLOAD.cfg Add a PREUPLOAD.cfg file to run git-clang-format on every commit 2017-03-08 16:51:26 +08:00
TEST_MAPPING TEST_MAPPING: add libmodprobe_tests to presubmit 2019-12-19 19:17:08 +00:00