Merge "vold: explicitly specify capabilities"

This commit is contained in:
Nikita Ioffe 2023-01-03 13:18:36 +00:00 committed by Gerrit Code Review
commit 4af861b631

View file

@ -7,3 +7,5 @@ service vold /system/bin/vold \
shutdown critical
group root reserved_disk
reboot_on_failure reboot,vold-failed
# CAP_SETGID, CAP_SETUID, CAP_SYS_RESOURCE are not used by the vold itself, but instead are used by the /system/bin/sdcard that vold execs
capabilities CHOWN DAC_OVERRIDE DAC_READ_SEARCH FOWNER FSETID KILL MKNOD NET_ADMIN SYS_ADMIN SYS_CHROOT SYS_NICE SYS_PTRACE BLOCK_SUSPEND SETGID SETUID SYS_RESOURCE