summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAyishwarya Narasimhan <ayishwar@codeaurora.org>2017-06-19 16:39:47 -0700
committerDemon000 <demonsingur@gmail.com>2018-01-24 21:47:42 +0200
commit3540bee54a3ecf54741f0b15b5cddbfdb6ab98aa (patch)
tree01bd238eca0d5f8fe7fed25782854261f23626de
parent98c1b947fde6e26c689ec2925b5f3139633b5f8f (diff)
init: Explicitly specify uid, gid and groups for cnd
Fixes the following denial. avc: denied { dac_override } for pid=426 comm="cnd" capability=1 scontext=u:r:cnd:s0 tcontext=u:r:cnd:s0 tclass=capability Change-Id: I1b38a2c1296a7524442dcccbbe96219d6ec28f0f CRs-Fixed: 2063571
-rw-r--r--rootdir/etc/init.qcom.rc2
1 files changed, 2 insertions, 0 deletions
diff --git a/rootdir/etc/init.qcom.rc b/rootdir/etc/init.qcom.rc
index b988da86..0de4d157 100644
--- a/rootdir/etc/init.qcom.rc
+++ b/rootdir/etc/init.qcom.rc
@@ -295,6 +295,8 @@ on property:persist.env.fastdorm.enabled=true
service cnd /vendor/bin/cnd
class main
+ user system
+ group system wifi inet radio wakelock net_admin
socket cnd stream 660 root inet
service irsc_util /vendor/bin/irsc_util "/etc/sec_config"