commit ebad9125c8150ea0e0c2d324927d4f0d949523af
author TreeHugger Robot <treehugger-gerrit@google.com> Tue Jul 02 17:07:32 2019 +0000
committer Android (Google) Code Review <android-gerrit@google.com> Tue Jul 02 17:07:32 2019 +0000
tree 3b20def77603de1fd82fa75e5e16d438fa6682e0
parent ac1c8ddcc3cc7256217c9ec7ccd6e86c9ce7f79d
parent a8f13667c299b1ccee4087aa5933fffe55648bf8

Merge "Set idmap2 binary uid and gid after forking" into qt-dev

libs/androidfw/PosixUtils.cpp

diff --git a/libs/androidfw/PosixUtils.cpp b/libs/androidfw/PosixUtils.cpp
index df0dd7c..f1ab149 100644
--- a/libs/androidfw/PosixUtils.cpp
+++ b/libs/androidfw/PosixUtils.cpp
@@ -64,6 +64,9 @@
     return nullptr;
   }
 
+  auto gid = getgid();
+  auto uid = getuid();
+
   char const** argv0 = (char const**)malloc(sizeof(char*) * (argv.size() + 1));
   for (size_t i = 0; i < argv.size(); i++) {
     argv0[i] = argv[i].c_str();
@@ -75,6 +78,16 @@
       PLOG(ERROR) << "fork";
       return nullptr;
     case 0: // child
+      if (setgid(gid) != 0) {
+        PLOG(ERROR) << "setgid";
+        exit(1);
+      }
+
+      if (setuid(uid) != 0) {
+        PLOG(ERROR) << "setuid";
+        exit(1);
+      }
+
       close(stdout[0]);
       if (dup2(stdout[1], STDOUT_FILENO) == -1) {
         abort();