Mårten Kongstad 1da49dc9b4 idmap2: lock down write access to /data/resouce-cache ...

Deny write access to /data/resource-cache for UIDs other than root and
system. While this is already handled by SELinux rules, add an
additional layer of security to explicitly prevent malicious apps from
messing with the system's idmap files.

Test: make idmap2_tests
Change-Id: Id986633558d5d02452276f05f64337a8700f148a

2019-01-18 10:05:48 -08:00

3.3 KiB

Raw Blame History

View Raw