| commit | 6ef1680964a69d6cc83a485326be32617da8dc15 | [log] [tgz] |
|---|---|---|
| author | Martijn Coenen <maco@google.com> | Fri Jan 18 16:40:01 2019 +0100 |
| committer | Martijn Coenen <maco@google.com> | Fri Jan 18 21:41:18 2019 +0100 |
| tree | 43c0914c7349338d9c07caff13239b71010e16f2 | |
| parent | 86f08a5190c8a36497ff3b9848ce3e6d0ba2e951 [diff] |
Install setresuid()/setresgid() seccomp filter in AppZygote. Transition app_zygote to the slightly less restrictive app_zygote seccomp filter; install a separate uid/gid filter to mitigate the risk. Bug: 111434506 Test: atest CtsSeccompHostTestCases passes Change-Id: I8bf85ce4bbfe843d1a161ae6408c7003e729c062