| commit | 1da49dc9b4f5605990f600e15f6f3c584fe2c0dc | [log] [tgz] |
|---|---|---|
| author | Mårten Kongstad <marten.kongstad@sony.com> | Mon Jan 14 10:03:53 2019 +0100 |
| committer | Todd Kennedy <toddke@google.com> | Fri Jan 18 10:05:48 2019 -0800 |
| tree | 4b2257c309d93e4aafbf07a4a13a0b9347b7d760 | |
| parent | 793f1a793c2b9cd8f7356b83b8a2e5fd8d444e9b [diff] |
idmap2: lock down write access to /data/resouce-cache Deny write access to /data/resource-cache for UIDs other than root and system. While this is already handled by SELinux rules, add an additional layer of security to explicitly prevent malicious apps from messing with the system's idmap files. Test: make idmap2_tests Change-Id: Id986633558d5d02452276f05f64337a8700f148a