commit 26f2d2f51941dda585009ae5cbd6f2ae1926ab2d
author Nick Kralevich <nnk@google.com> Wed Jan 23 09:24:33 2013 -0800
committer Colin Cross <ccross@android.com> Wed Jun 19 12:26:28 2013 -0700
tree 0beb2295f4eb8a641abb74df4911bd08af78d2a1
parent e755dfd43812ebd9a0d0d6a2106316f343ffb5a2

property_service: make /dev/__properties__ readable

Currently, system properties are passed via the environment
variable ANDROID_PROPERTY_WORKSPACE and a file descriptor passed
from parent to child. This is insecure for setuid executables,
as the environment variable can be changed by the caller.

Make the /dev/__properties__ file accessible, so an app can
get properties directly from the file, rather than relying on
environment variables.

Preserve the environment variable for compatibility with pre-existing
apps.

Bug: 8045561

(cherry picked from commit 7ece0a862cf97e85bbe69458a32a2bd165456874)

Change-Id: I762da21ef4075f288745efed0ec7d16c2b71303c

init/property_service.c

diff --git a/init/property_service.c b/init/property_service.c
index 86e35f1..c682809 100755
--- a/init/property_service.c
+++ b/init/property_service.c
@@ -123,7 +123,7 @@
         /* dev is a tmpfs that we can use to carve a shared workspace
          * out of, so let's do that...
          */
-    fd = open("/dev/__properties__", O_RDWR | O_CREAT | O_NOFOLLOW, 0600);
+    fd = open(PROP_FILENAME, O_RDWR | O_CREAT | O_NOFOLLOW, 0644);
     if (fd < 0)
         return -1;
 
@@ -136,12 +136,10 @@
 
     close(fd);
 
-    fd = open("/dev/__properties__", O_RDONLY | O_NOFOLLOW);
+    fd = open(PROP_FILENAME, O_RDONLY | O_NOFOLLOW);
     if (fd < 0)
         return -1;
 
-    unlink("/dev/__properties__");
-
     w->data = data;
     w->size = size;
     w->fd = fd;