| commit | 64d1f3efd759b70462aecb6cf1d8c733872a8911 | [log] [tgz] |
|---|---|---|
| author | Christopher Tate <ctate@google.com> | Wed Sep 26 15:25:59 2012 -0700 |
| committer | Christopher Tate <ctate@google.com> | Thu Sep 27 18:14:55 2012 -0700 |
| tree | 31eaca994b0deb5a54a5adec1c2a4f34f93449b7 | |
| parent | f7243dcc616bc9bd84fa519356babb15d6f17e7d [diff] |
DO NOT MERGE - Full (local) restore security changes
(1) Prevent full restore from creating files/directories that are
accessible by other applications
(2) Don't restore filesets from "system" packages; i.e. any that runs
as a special uid, unless they define their own agent for handling
the restore process.
Bug 7168284
This is a cherry-pick from the originating tree.
Change-Id: I9f39ada3c4c3b7ee63330b015e62745e84ccb58f