tree 8ce9773345921d01b417db985961a82d49ab4ff1
parent 64d4c47f1869c5f655f9a1bbdc57ad977b76f817
author Nick Kralevich <nnk@google.com> 1362008381 -0800
committer Nick Kralevich <nnk@google.com> 1362086088 -0800

Zygote: remount /system nosuid/nodev

Android no longer has any setuid / setgid programs accessible
to zygote. Make sure /system is remounted nosuid and nodev
for zygote spawned processes.

We use mount namespaces to make sure these changes are
only visible to zygote spawned processes. We continue to need
/system mounted with suid to support /system/bin/run-as.
See also: b/8253345

Change-Id: Ib58a8d56b42e4b022b6b4e51932f0a415298c920