commit 8c27e19c1c20f05db9e9e061dffb3aa56d8275b9
author Jorge Lucangeli Obes <jorgelo@google.com> Fri Sep 29 14:56:07 2017 -0400
committer Jorge Lucangeli Obes <jorgelo@google.com> Fri Sep 29 15:34:23 2017 -0400
tree 24c0b56fe710f06766ea2a050c5d4fcd0aa87c0c
parent 39071a517738b24611ae373c9a608a4ca00d0630

run-as: Keep supplementary groups.

This broke TCP debugging because processes don't inherit the AID_INET
group.

Bug: 67058466
Test: adb shell run-as com.example.native_activity groups prints "inet".
Change-Id: Ieb461dccda8611057bb2d16334e584eb5e57c8b1

run-as/run-as.cpp

diff --git a/run-as/run-as.cpp b/run-as/run-as.cpp
index e7b8cc2..b27cfad 100644
--- a/run-as/run-as.cpp
+++ b/run-as/run-as.cpp
@@ -194,6 +194,7 @@
   ScopedMinijail j(minijail_new());
   minijail_change_uid(j.get(), uid);
   minijail_change_gid(j.get(), gid);
+  minijail_keep_supplementary_gids(j.get());
   minijail_enter(j.get());
 
   if (selinux_android_setcontext(uid, 0, info.seinfo, pkgname) < 0) {