| commit | f6d6fa8cbc0251da1900e858bb0379cda5014b6f | [log] [tgz] |
|---|---|---|
| author | Christopher Tate <ctate@google.com> | Wed Sep 26 15:25:59 2012 -0700 |
| committer | Christopher Tate <ctate@google.com> | Thu Sep 27 12:54:37 2012 -0700 |
| tree | f0a25325b6a7534d3afa3b537ccde04d9bfc1e84 | |
| parent | dd78d462f6dceac71f9d1cbb723bb38a3b5bdc2e [diff] |
Full (local) restore security changes
(1) Prevent full restore from creating files/directories that are
accessible by other applications
(2) Don't restore filesets from "system" packages; i.e. any that runs
as a special uid, unless they define their own agent for handling
the restore process.
Bug 7168284
Change-Id: Id6a0cb4c113c2e4a8c4605252cffa41bea22d8a3