No description
Find a file
Martijn Coenen 879fa8015d Set default ACL on application-specific directories.
On devices without sdcardfs, application-specific directories have a
particular GID that ensure some privileged daemons (like installers) are
able to write to them. Android applications however run with a umask of 0077, which means that
any subdirectory they create within their app-specific directory has
mode 700, which in turn prevents things like DownloadManager from
working, since it can be asked to download into a subdir of the app's
private storage.

To prevent this from happening, set a default 770 ACL on the top-level
app-specific directory (eg, /data/media/0/Android/data/com.foo); the
effect of that default ACL is that all directories that are created
within these directories automatically get a 770 mask, regardless of the
umask that the process has.

Bug: 146419093
Test: atest FuseDaemonHostTest on cf_x86 (without sdcardfs)

Change-Id: I3178694e6d25ce3d04a0918ac66862f644635704
2020-02-12 13:18:44 +01:00
bench Abort long-running benchmarks, report progress. 2017-11-07 09:57:12 -07:00
binder/android/os Expose new IncFS interface through Vold 2020-01-27 22:26:37 -08:00
fs Add support for casefolding and project quotas 2020-01-14 18:11:56 -08:00
model Merge "Use std::string to return crypto device, not char *" am: 80731b0975 am: 2381810b99 am: 1541f9f32b 2020-02-11 01:18:30 +00:00
tests Removed obsolete Test 2019-11-18 22:53:30 +00:00
.clang-format vold: use system-clang-format 2019-09-16 12:00:40 -07:00
Android.bp Merge "Fixed a wrong AIDL import path" am: aa038e2f4d am: b35ead2c3a am: 3c78c789d6 2020-01-23 03:53:23 +00:00
AppFuseUtil.cpp AppFuseUtil: Call ForceUnmount before PrepareDir. 2019-04-09 18:45:32 +01:00
AppFuseUtil.h Extract AppFuse as a util 2018-11-14 07:28:06 +00:00
Benchmark.cpp vold: use RAII wake locks 2019-06-26 10:20:30 -07:00
Benchmark.h clang-format many files. 2018-09-18 15:41:22 -07:00
BenchmarkGen.h Abort long-running benchmarks, report progress. 2017-11-07 09:57:12 -07:00
CheckEncryption.cpp Test that plaintext can't be read from disk for encrypted files. 2017-10-27 15:14:56 -07:00
CheckEncryption.h Test that plaintext can't be read from disk for encrypted files. 2017-10-27 15:14:56 -07:00
Checkpoint.cpp Fix the overflow issue in Checkpoint 2020-01-03 08:12:03 +00:00
Checkpoint.h vold: implement resetCheckpoint 2019-10-12 00:43:04 +01:00
CleanSpec.mk Add an empty CleanSpec.mk 2010-03-08 18:05:25 -08:00
cryptfs.cpp Use std::string to return crypto device, not char * 2020-02-07 11:27:49 -08:00
cryptfs.h Use std::string to return crypto device, not char * 2020-02-07 11:27:49 -08:00
Devmapper.cpp Replace manual dm ioctls with libdm. 2019-05-13 13:07:12 -07:00
Devmapper.h Replace manual dm ioctls with libdm. 2019-05-13 13:07:12 -07:00
EncryptInplace.cpp Consistently use CLOCK_MONOTONIC for timing encryption 2019-12-26 18:53:53 +00:00
EncryptInplace.h Refactor: make cryptfs.h smaller 2020-02-07 11:16:12 -08:00
FileDeviceUtils.cpp Remove excess logging in secdiscard 2019-03-21 19:13:51 +00:00
FileDeviceUtils.h clang-format many files. 2018-09-18 15:41:22 -07:00
FsCrypt.cpp Refactor: make cryptfs.h smaller 2020-02-07 11:16:12 -08:00
FsCrypt.h vold: Do not cache CE keys in vold 2020-01-24 00:20:22 +00:00
IdleMaint.cpp Merge "vold: use RAII wake locks" am: b585363d93 2019-06-26 19:43:21 -07:00
IdleMaint.h Add functions to handle idle maintenance 2017-11-14 15:12:30 -08:00
KeyBuffer.cpp clang-format many files. 2018-09-18 15:41:22 -07:00
KeyBuffer.h clang-format many files. 2018-09-18 15:41:22 -07:00
Keymaster.cpp Update vold to use KM4.1 2020-01-21 06:58:19 -07:00
Keymaster.h Update vold to use KM4.1 2020-01-21 06:58:19 -07:00
KeyStorage.cpp Update vold to use KM4.1 2020-01-21 06:58:19 -07:00
KeyStorage.h vold: Pass std::string by const reference 2018-12-20 10:38:31 -08:00
KeyUtil.cpp Refactor to use EncryptionPolicy everywhere we used to use raw_ref 2020-01-28 11:17:58 -08:00
KeyUtil.h Refactor to use EncryptionPolicy everywhere we used to use raw_ref 2020-01-28 11:17:58 -08:00
Loop.cpp Block and wait for /dev/block/loop<N> to appear in case it was created asynchronously. 2019-06-18 15:27:37 -07:00
Loop.h clang-format many files. 2018-09-18 15:41:22 -07:00
main.cpp Refactor: make cryptfs.h smaller 2020-02-07 11:16:12 -08:00
MetadataCrypt.cpp Set metadata cipher in fstab 2020-01-30 17:20:27 -08:00
MetadataCrypt.h Make ext4 userdata checkpoints work with metadata encryption 2019-06-27 17:42:25 +00:00
MoveStorage.cpp vold: use RAII wake locks 2019-06-26 10:20:30 -07:00
MoveStorage.h clang-format many files. 2018-09-18 15:41:22 -07:00
NetlinkHandler.cpp clang-format many files. 2018-09-18 15:41:22 -07:00
NetlinkHandler.h clang-format many files. 2018-09-18 15:41:22 -07:00
NetlinkManager.cpp clang-format many files. 2018-09-18 15:41:22 -07:00
NetlinkManager.h clang-format many files. 2018-09-18 15:41:22 -07:00
OWNERS Add zezeozue to OWNERS 2019-11-15 16:03:47 +00:00
PREUPLOAD.cfg vold should be fully developed in AOSP. 2018-09-11 12:08:43 -06:00
Process.cpp Convert ifstream usage into fopen() to prevent fd leaks into child processes 2019-03-26 20:10:24 +00:00
Process.h Move to modern utility methods from android::base. 2017-10-17 12:40:51 -06:00
ScryptParameters.cpp clang-format many files. 2018-09-18 15:41:22 -07:00
ScryptParameters.h clang-format many files. 2018-09-18 15:41:22 -07:00
secdiscard.cpp secdiscard: should call fsync to avoid reordering IOs 2019-08-12 15:31:10 +00:00
sehandle.h clang-format many files. 2018-09-18 15:41:22 -07:00
TEST_MAPPING Add TEST_MAPPING for vold. 2020-02-10 08:57:30 +01:00
Utils.cpp Set default ACL on application-specific directories. 2020-02-12 13:18:44 +01:00
Utils.h Use a regex to create application directories. 2020-02-11 14:22:30 +01:00
vdc.cpp Add '/system/bin/vdc volume reset' command 2019-12-02 11:51:20 +00:00
vdc.rc Remove all references to FDE enable wipe 2017-12-22 11:17:15 -08:00
vold.rc vold: Grant root group 2018-08-08 17:08:02 -07:00
vold_prepare_subdirs.cpp Allow search permission on apex data directories. 2020-01-17 11:37:31 +00:00
VoldNativeService.cpp Merge "Refactor: make cryptfs.h smaller" am: 98c501d28e am: 645c2f40a0 am: ebbabdc8fb 2020-02-08 02:27:49 +00:00
VoldNativeService.h Expose new IncFS interface through Vold 2020-01-27 22:26:37 -08:00
VoldUtil.cpp Move over to the C++ Fstab class 2019-01-31 12:34:39 -08:00
VoldUtil.h Refactor: make cryptfs.h smaller 2020-02-07 11:16:12 -08:00
VolumeManager.cpp Use a regex to create application directories. 2020-02-11 14:22:30 +01:00
VolumeManager.h Automatically use correct lower paths for setupAppDir. 2020-01-27 14:00:29 +01:00
wait_for_keymaster.cpp add wait_for_keymaster 2018-05-09 12:59:18 -07:00
wait_for_keymaster.rc Add rc file for wait_for_keymaster 2018-05-15 16:15:21 -07:00