Merge "vold: explicitly specify capabilities" am: 4af861b631 am: 8b23e23987

Original change: https://android-review.googlesource.com/c/platform/system/vold/+/2371428

Change-Id: Idba29df1b014fda9ee463af137bc310baaaabd65
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Nikita Ioffe 2023-01-03 14:26:05 +00:00 committed by Automerger Merge Worker
commit 7f7850a648

View file

@ -7,3 +7,5 @@ service vold /system/bin/vold \
shutdown critical
group root reserved_disk
reboot_on_failure reboot,vold-failed
# CAP_SETGID, CAP_SETUID, CAP_SYS_RESOURCE are not used by the vold itself, but instead are used by the /system/bin/sdcard that vold execs
capabilities CHOWN DAC_OVERRIDE DAC_READ_SEARCH FOWNER FSETID KILL MKNOD NET_ADMIN SYS_ADMIN SYS_CHROOT SYS_NICE SYS_PTRACE BLOCK_SUSPEND SETGID SETUID SYS_RESOURCE