| commit | 2d37f9a1eb7f5375e8cad9ccb59d96d650d18f6e | [log] [tgz] |
|---|---|---|
| author | Nick Kralevich <nnk@google.com> | Mon Feb 25 12:13:27 2013 -0800 |
| committer | Nick Kralevich <nnk@google.com> | Mon Feb 25 15:34:32 2013 -0800 |
| tree | f60d1acc589b553b136a58be0ca00acaa8b8a19f | |
| parent | 480936ff88963b8af86a770cac314a6956dfbfe0 [diff] |
Zygote: remount /system nosuid/nodev Android no longer has any setuid / setgid programs accessible to zygote. Make sure /system is remounted nosuid and nodev for zygote spawned processes. We use mount namespaces to make sure these changes are only visible to zygote spawned processes. We continue to need /system mounted with suid to support /system/bin/run-as. See also: b/8253345 Change-Id: I959512520461f22d1fd88c12a2785a362639f7ed