| commit | 258193bd533d9e84622307241d9049ed35e9feea | [log] [tgz] |
|---|---|---|
| author | Robert Sesek <rsesek@google.com> | Wed Sep 21 17:01:36 2016 -0400 |
| committer | Robert Sesek <rsesek@google.com> | Mon Oct 31 10:33:36 2016 -0400 |
| tree | a24d35a0fa4589f88d6f0b74a2ae49ecff0e2559 | |
| parent | e6589851132792b1fa76af10d481dd7f8a43d44b [diff] |
Add fs_config entries for the webview_zygote. The webview_zygote is a non-root zygote process that creates isolated_app children for rendering web content. It needs: - CAP_SETUID and CAP_SETGID to change the UID of the new child process. - CAP_SETPCAP to clear the capability bounding set after forking. Test: m Test: angler boots Bug: 21643067 Change-Id: I986fa04be54e812f5dd2afa14e5d2d3e474e2b10