Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Revert "zygote: don't drop CAP_SYS_PTRACE from the bounding set."

Browse Source 
am: 0a2d61505a

Change-Id: I38d9ec4b7be41b5ed7b3d9c30bce1c09315a5135
This commit is contained in:
Josh Gao
2017-02-06 18:44:03 +00:00
committed by android-build-merger
parent 74a8b6543f 0a2d61505a
commit c75e4153cf
1 changed files with 0 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
core/jni/com_android_internal_os_Zygote.cpp
View File

@@ -247,11 +247,6 @@ static void EnableKeepCapabilities(JNIEnv* env) {
static void DropCapabilitiesBoundingSet(JNIEnv* env) { static void DropCapabilitiesBoundingSet(JNIEnv* env) {
for (int i = 0; prctl(PR_CAPBSET_READ, i, 0, 0, 0) >= 0; i++) { for (int i = 0; prctl(PR_CAPBSET_READ, i, 0, 0, 0) >= 0; i++) {
// Keep CAP_SYS_PTRACE in our bounding set so crash_dump can gain it.
if (i == CAP_SYS_PTRACE) {
continue;
}
int rc = prctl(PR_CAPBSET_DROP, i, 0, 0, 0); int rc = prctl(PR_CAPBSET_DROP, i, 0, 0, 0);
if (rc == -1) { if (rc == -1) {
if (errno == EINVAL) { if (errno == EINVAL) {