Google Git
Sign in
fuchsia / third_party / android / platform / system / core / 64d97d87611a39163aa121f17214f4a846954cee
commit64d97d87611a39163aa121f17214f4a846954cee[log] [tgz]
authorMark Salyzyn <salyzyn@google.com>Mon Apr 09 09:50:32 2018 -0700
committerMark Salyzyn <salyzyn@google.com>Mon Apr 16 14:51:56 2018 -0700
tree2aadfbf34c59d3107bd9030f4f635e8ab1829493
parent22dc27b9fa46b20aca4f5982979681a858a97284 [diff]
lmkd: limit capability set to minimum

Set F() capability set and 'drop' lmkd from AID_ROOT to AID_LMKD uid
and from AID_ROOT to AID_LMKD and AID_SYSTEM gid.

/dev/memcg/memory.pressure defaults to root.root mode 0000, set it up
as root.system mode 0040 to allow lmkd read access.

Instrument failure to set SCHED_FIFO.

Annotate access points that require elevated capabilities.

Test: check /proc/`pidof lmkd`/status for capability set
Test: lmkd_unit_test
Bug: 77650566
Change-Id: I986081a0434cf6e842b63a55726380205b30a3ea
4 files changed
tree: 2aadfbf34c59d3107bd9030f4f635e8ab1829493
  1. adb/
  2. adf/
  3. base/
  4. bootstat/
  5. cpio/
  6. debuggerd/
  7. demangle/
  8. diagnose_usb/
  9. fastboot/
  10. fs_mgr/
  11. gatekeeperd/
  12. healthd/
  13. include/
  14. init/
  15. libappfuse/
  16. libasyncio/
  17. libbacktrace/
  18. libbinderwrapper/
  19. libcrypto_utils/
  20. libcutils/
  21. libdiskconfig/
  22. libgrallocusage/
  23. libion/
  24. libkeyutils/
  25. liblog/
  26. libmemtrack/
  27. libmemunreachable/
  28. libmetricslogger/
  29. libnativebridge/
  30. libnativeloader/
  31. libnetutils/
  32. libpackagelistparser/
  33. libpixelflinger/
  34. libprocessgroup/
  35. libprocinfo/
  36. libqtaguid/
  37. libsparse/
  38. libsuspend/
  39. libsync/
  40. libsystem/
  41. libsysutils/
  42. libunwindstack/
  43. libusbhost/
  44. libutils/
  45. libvndksupport/
  46. libziparchive/
  47. lmkd/
  48. logcat/
  49. logd/
  50. logwrapper/
  51. mkbootimg/
  52. property_service/
  53. qemu_pipe/
  54. reboot/
  55. rootdir/
  56. run-as/
  57. sdcard/
  58. shell_and_utilities/
  59. storaged/
  60. toolbox/
  61. trusty/
  62. usbd/
  63. .clang-format ⇨ .clang-format-4
  64. .clang-format-2
  65. .clang-format-4
  66. .gitignore
  67. Android.bp
  68. Android.mk
  69. CleanSpec.mk
  70. MODULE_LICENSE_APACHE2
  71. NOTICE
  72. OWNERS
  73. platform_tools_tool_version.mk
  74. PREUPLOAD.cfg