tag 52e798bc48993435d62890f44197b9e4304a4416
tagger The Android Open Source Project <initial-contribution@android.com> Fri May 04 11:06:23 2018 -0700
object 542342125831c69eb9c80265cd865250579fa19d

Android Things LTS v1.0.0 (4760714)

commit 542342125831c69eb9c80265cd865250579fa19d
author Jorge Lucangeli Obes <jorgelo@google.com> Thu Apr 26 11:52:15 2018 -0400
committer Jorge Lucangeli Obes <jorgelo@google.com> Thu Apr 26 15:40:14 2018 -0400
tree 3e9522afb9264ae5bc35a9360048aae6acd4560e
parent 9dd13fd059ffe080c55f60ab98fbecdc7a3ed7ec

Skip dropping the bounding set without SECURE_NOROOT.

If we're asked to skip setting *and* locking the SECURE_NOROOT
securebit, also skip dropping the bounding set. If the caller wants to
regain all capabilities when executing a set-user-ID-root program,
allow them to do so. The default behavior (i.e. the behavior without
|securebits_skip_mask| set) will still put the jailed process tree in a
capabilities-only environment.

This will allow giving powerd on Chrome OS some capabilities without
breaking other things.

Bug: 78629772
Test: New unit tests.
Test: Ad-hoc with fork+exec program + setuid program + -B 0x3
Test: Setuid program is able to keep all caps.

Change-Id: I36f79a42666720a65d88ec48454b56695f25b64b