| commit | 364f7b1ff95050e021e080aebf1a80879058d0c4 | [log] [tgz] |
|---|---|---|
| author | Dmitry Torokhov <dtor@chromium.org> | Mon Jun 20 12:15:13 2016 -0700 |
| committer | chrome-bot <chrome-bot@chromium.org> | Mon Jun 20 20:10:32 2016 -0700 |
| tree | d3eda1f7b27a4f5af859b6fead16881ad54b4c3e | |
| parent | 4211124209fdb4469462b6e1b39433cc52b76d02 [diff] |
security_SuidBinaries: add Android's run-as to the list The run-as utility is shipped in all Android builds, and it has enhanced capabilities, so let's add it to the list. BUG=chromium:621552 TEST=build, run test. Change-Id: I6e3541abdc3db4a6f27201f915320d8095526df7 Signed-off-by: Dmitry Torokhov <dtor@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/354111 Reviewed-by: Mike Frysinger <vapier@chromium.org>
diff --git a/client/site_tests/security_SuidBinaries/baseline.fscap b/client/site_tests/security_SuidBinaries/baseline.fscap index 8ecae86..d02c4f6 100644 --- a/client/site_tests/security_SuidBinaries/baseline.fscap +++ b/client/site_tests/security_SuidBinaries/baseline.fscap
@@ -5,3 +5,4 @@ /usr/bin/fusermount = cap_sys_admin+ep /usr/sbin/hostapd = cap_net_admin,cap_net_raw+ei /usr/sbin/dnsmasq = cap_net_bind_service,cap_net_admin,cap_net_raw+ei +/opt/google/containers/android/rootfs/root/system/bin/run-as = cap_setgid,cap_setuid+ep