commit 79035230155859111b8a8c922d7b123e359f6039
author Daniel Rosenberg <drosen@google.com> Wed Nov 29 14:49:08 2017 -0800
committer Daniel Rosenberg <drosen@google.com> Wed Jan 10 17:43:51 2018 -0800
tree d2f5b9dab1ef4e85b190205ad85e68f0f3b8f438
parent 781715eab8383ec7aa9e2b7126ddfdad30b2c007

Change /configfs/sdcardfs to 0770

Change-Id: I0a66f6b3ebc3dee398e4f23f5a58ebf7d62cc4c3
Bug: 69929297
Test: setenforce 0
      su
      mkdir /config/sdcardfs/test
      su u0_a0,u0_a0,u0_a0
      echo 10000 > /config/sdcardfs/test/appid
      Write should fail
Signed-off-by: Daniel Rosenberg <drosen@google.com>

rootdir/init.rc

diff --git a/rootdir/init.rc b/rootdir/init.rc
index 3b7add7..b459594 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -86,7 +86,7 @@
     restorecon_recursive /mnt
 
     mount configfs none /config
-    chmod 0775 /config/sdcardfs
+    chmod 0770 /config/sdcardfs
     chown system package_info /config/sdcardfs
 
     mkdir /mnt/secure 0700 root root