Gitiles
Code Review Sign In
gerrit-public.fairphone.software / platform / packages / modules / adb / 83e2851e956f5c70e480f088b9256a2d306ffe33
commit83e2851e956f5c70e480f088b9256a2d306ffe33[log] [tgz]
authorJorge Lucangeli Obes <jorgelo@google.com>Mon Dec 14 13:18:57 2015 -0800
committerJorge Lucangeli Obes <jorgelo@google.com>Thu Dec 17 10:49:53 2015 -0800
tree87e5ccbbe518215053addc61596db2aa1ba10faf
parent24d43fc93a8f8dd129811b5fd8a596f062736b80 [diff]
adb: Use Minijail for privilege dropping.

By using Minijail we avoid writing the same priv-dropping code over
and over again. This also enables future hardening opportunities.
We're already using Minijail for priv-dropping on Brillo.

Minijail is unit- and integration-tested on the
Chrome OS CI infrastructure (pulling from the same repo, see
https://wmatrix.googleplex.com/security?tests=security_Minijail0).
Once CI comes to Android, it will be continuously tested there as well.

Both 'adb root' and 'adb unroot' still work.

Bug: 26099611
Change-Id: I52c456ea272d27bd6fbc71200f4fdd928a592158
2 files changed
tree: 87e5ccbbe518215053addc61596db2aa1ba10faf
  1. client/
  2. daemon/
  3. .clang-format
  4. adb.cpp
  5. adb.h
  6. adb_auth.cpp
  7. adb_auth.h
  8. adb_auth_client.cpp
  9. adb_auth_host.cpp
  10. adb_client.cpp
  11. adb_client.h
  12. adb_io.cpp
  13. adb_io.h
  14. adb_io_test.cpp
  15. adb_listeners.cpp
  16. adb_listeners.h
  17. adb_trace.cpp
  18. adb_trace.h
  19. adb_utils.cpp
  20. adb_utils.h
  21. adb_utils_test.cpp
  22. Android.mk
  23. commandline.cpp
  24. console.cpp
  25. CPPLINT.cfg
  26. diagnose_usb.cpp
  27. diagnose_usb.h
  28. fdevent.cpp
  29. fdevent.h
  30. fdevent_test.cpp
  31. file_sync_client.cpp
  32. file_sync_service.cpp
  33. file_sync_service.h
  34. framebuffer_service.cpp
  35. get_my_path_darwin.cpp
  36. get_my_path_linux.cpp
  37. jdwp_service.cpp
  38. line_printer.cpp
  39. line_printer.h
  40. MODULE_LICENSE_APACHE2
  41. mutex_list.h
  42. NOTICE
  43. OVERVIEW.TXT
  44. protocol.txt
  45. remount_service.cpp
  46. remount_service.h
  47. services.cpp
  48. services.h
  49. SERVICES.TXT
  50. set_verity_enable_state_service.cpp
  51. shell_service.cpp
  52. shell_service.h
  53. shell_service_protocol.cpp
  54. shell_service_protocol_test.cpp
  55. shell_service_test.cpp
  56. socket.h
  57. socket_test.cpp
  58. sockets.cpp
  59. sockets.dia
  60. SYNC.TXT
  61. sysdeps.h
  62. sysdeps_win32.cpp
  63. sysdeps_win32_test.cpp
  64. test_adb.py
  65. test_device.py
  66. test_track_devices.cpp
  67. transport.cpp
  68. transport.h
  69. transport_local.cpp
  70. transport_test.cpp
  71. transport_usb.cpp
  72. usb_linux.cpp
  73. usb_linux_client.cpp
  74. usb_osx.cpp
  75. usb_windows.cpp