Gitiles
Code Review Sign In
review.blissroms.org / platform_system_core_old / c2a1f57f5f8492bc8951521d7a8422b951de0b30
commitc2a1f57f5f8492bc8951521d7a8422b951de0b30[log] [tgz]
authorLuis Hector Chavez <lhchavez@google.com>Wed Jun 27 10:40:10 2018 -0700
committerLuis Hector Chavez <lhchavez@google.com>Wed Jun 27 11:09:28 2018 -0700
treec7d8c67e7c4c9fa8d6fd21f9b462aa415b32be18
parentbcf0c110d64775b51bf3fd160929bbe76247af41 [diff]
Add a way to disable run-as at runtime

This change adds the ro.boot.disable_runas system property, that when
set, disables the run-as command. This is done to reduce the surface
area of programs that have file based capabilities in Chrome OS, and
what they can do when running in non-developer mode.

Bug: 31630024
Test: run-as still works in aosp_sailfish
Test: run-as still works in Android in Chrome OS (in developer mode)
Change-Id: Iaf1d6f9ceb65081b7a9e17b9b91d8855e4080133
2 files changed
tree: c7d8c67e7c4c9fa8d6fd21f9b462aa415b32be18
  1. adb/
  2. adf/
  3. base/
  4. bootstat/
  5. cpio/
  6. debuggerd/
  7. demangle/
  8. diagnose_usb/
  9. fastboot/
  10. fs_mgr/
  11. gatekeeperd/
  12. healthd/
  13. include/
  14. init/
  15. libappfuse/
  16. libasyncio/
  17. libbacktrace/
  18. libbinderwrapper/
  19. libcrypto_utils/
  20. libcutils/
  21. libdiskconfig/
  22. libgrallocusage/
  23. libion/
  24. libkeyutils/
  25. liblog/
  26. libmemtrack/
  27. libmemunreachable/
  28. libmetricslogger/
  29. libnativebridge/
  30. libnativeloader/
  31. libnetutils/
  32. libpackagelistparser/
  33. libpixelflinger/
  34. libprocessgroup/
  35. libprocinfo/
  36. libqtaguid/
  37. libsparse/
  38. libstats/
  39. libsuspend/
  40. libsync/
  41. libsystem/
  42. libsysutils/
  43. libunwindstack/
  44. libusbhost/
  45. libutils/
  46. libvndksupport/
  47. libziparchive/
  48. llkd/
  49. lmkd/
  50. logcat/
  51. logd/
  52. logwrapper/
  53. mkbootimg/
  54. property_service/
  55. qemu_pipe/
  56. reboot/
  57. rootdir/
  58. run-as/
  59. sdcard/
  60. shell_and_utilities/
  61. storaged/
  62. toolbox/
  63. trusty/
  64. usbd/
  65. .clang-format ⇨ .clang-format-4
  66. .clang-format-2
  67. .clang-format-4
  68. .gitignore
  69. Android.bp
  70. Android.mk
  71. CleanSpec.mk
  72. MODULE_LICENSE_APACHE2
  73. NOTICE
  74. OWNERS
  75. platform_tools_tool_version.mk
  76. PREUPLOAD.cfg