diff options
| author | Nick Kralevich <nnk@google.com> | 2013-02-13 10:39:34 -0800 |
|---|---|---|
| committer | Nick Kralevich <nnk@google.com> | 2013-02-13 13:33:10 -0800 |
| commit | 921e9aea72bc2aa99a52ccdb90573bbd3bf3508f (patch) | |
| tree | d823bac2a9ff06b9ba6aad4226806f80bc0b34f9 /vm/compiler/codegen/x86/CodegenInterface.cpp | |
| parent | 896f17741aa4d897dcd9a7cb08bbbcbff93dbc60 (diff) | |
Zygote: limit the bounding capability set to CAP_NET_RAW
Prevent a zygote spawned application from acquiring
capabilities other than CAP_NET_RAW. The only Zygote
accessible program on Android which grants capabilities
is /system/bin/ping (CAP_NET_RAW), so we don't need to
keep the other capabilities in our bounding set.
Change-Id: Ifbfdbaf3d32bc6237b6e1fc57766ca13baae7bde
Diffstat (limited to 'vm/compiler/codegen/x86/CodegenInterface.cpp')
0 files changed, 0 insertions, 0 deletions