Merge "vold: explicitly specify capabilities" am: 4af861b631
am: 8b23e23987
Original change: https://android-review.googlesource.com/c/platform/system/vold/+/2371428 Change-Id: Idba29df1b014fda9ee463af137bc310baaaabd65 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
commit
7f7850a648
1 changed files with 2 additions and 0 deletions
2
vold.rc
2
vold.rc
|
@ -7,3 +7,5 @@ service vold /system/bin/vold \
|
|||
shutdown critical
|
||||
group root reserved_disk
|
||||
reboot_on_failure reboot,vold-failed
|
||||
# CAP_SETGID, CAP_SETUID, CAP_SYS_RESOURCE are not used by the vold itself, but instead are used by the /system/bin/sdcard that vold execs
|
||||
capabilities CHOWN DAC_OVERRIDE DAC_READ_SEARCH FOWNER FSETID KILL MKNOD NET_ADMIN SYS_ADMIN SYS_CHROOT SYS_NICE SYS_PTRACE BLOCK_SUSPEND SETGID SETUID SYS_RESOURCE
|
||||
|
|
Loading…
Reference in a new issue