| commit | 2206e9c1b5daa060696413676b0a1a57d3b01c47 | [log] [tgz] |
|---|---|---|
| author | Nick Kralevich <nnk@google.com> | Wed Sep 14 09:55:24 2011 -0700 |
| committer | Nick Kralevich <nnk@google.com> | Wed Sep 14 09:55:24 2011 -0700 |
| tree | a9a43b2e72e9a61c5a3f0a1298a4256f96ee91af | |
| parent | ae3c9c48748f5e536610159ca67a8b344092e500 [diff] |
BannedFilesTest: block setuid "ip" command, fix tcpdump Don't allow a setuid/setgid "ip" command. The "ip" command can modify the network routing tables, which may allow a malicious attacker to intercept and modify network traffic to and from the device. Add an additional check for tcpdump in /vendor/bin Change-Id: Ied72676fd67582b30cbcafab2210346a0f9d9536