diff options
| author | 2025-01-03 14:18:12 -0800 | |
|---|---|---|
| committer | 2025-01-06 15:46:07 -0800 | |
| commit | 35f00436f25c39813d2927bc58486703a753d1ec (patch) | |
| tree | 72aca2bdd079311d32666df9b7b0aa91226569da /libs/androidfw/AttributeResolution.cpp | |
| parent | 58c73246e65934fa5a63952a656c31114cd1707c (diff) | |
Do not use BIND_INCLUDE_CAPABILITIES when bind PrintService
The BIND_INCLUDE_CAPABILITIES binding flag is used when a print service
is bound by system_server. As a result, all permissions are passed down
to the service, which is a security vulnerability. This patch adds
a new flag do_not_include_capabilities that controls this behavior.
Bug: 291281543
Test: build and run on Akita
Flag: com.android.server.print.do_not_include_capabilities
Change-Id: I9b2484fc5caa1681bbd80ada9200a01317fc22e9
Diffstat (limited to 'libs/androidfw/AttributeResolution.cpp')
0 files changed, 0 insertions, 0 deletions