tree b9151cb443b2129442a6d51fb74dd2fe46780731
parent d1126e7160b87313de91be5dbf7d0d9b08900f70
author Martijn Coenen <maco@google.com> 1591083952 +0200
committer android-build-team Robot <android-build-team-robot@google.com> 1591749377 +0000

Drop supplementary groups for child zygotes.

Child zygotes like Webview zygote and App zygote are created with an
empty supplementary group list; this was intended to drop all groups,
but instead we don't call setgroups() at all, which means that these
child zygotes are run with the same groups as the parent zygotes.

Currently those groups are AID_READPROC and AID_RESERVED_DISK, and the
child zygotes should need neither: AID_READPROC is only used for
wrapping with the wrap.com.packagename sysprop, which doesn't really
make sense for child zygotes.  AID_RESERVED_DISK shouldn't be needed
because child zygotes and their children are not critical, and therefore
shouldn't be able to use reserved disk space.

Remove the groups by explicitly call setgroups(0, NULL); for child
zygotes.

Bug: 156741968
Test: observe /proc/zygote_pid/status, notice groups are empty
Test: atest CtsExternalServiceTestCases
Change-Id: I4ee43a8bb9d86ff6f620437fb290481365a9e988
(cherry picked from commit 5a45262741f6410a61bec59a41b4229e349a00b7)