| commit | a2ceaf6b8be5cb9fdc5fa94ae628b5f617813197 | [log] [tgz] |
|---|---|---|
| author | Robert Sesek <rsesek@google.com> | Wed Sep 21 17:01:36 2016 -0400 |
| committer | Robert Sesek <rsesek@google.com> | Mon Oct 31 10:33:36 2016 -0400 |
| tree | a24d35a0fa4589f88d6f0b74a2ae49ecff0e2559 | |
| parent | b5ce6f02dd11b42c03884dd9531c6c8a80bcecda [diff] |
Add fs_config entries for the webview_zygote. The webview_zygote is a non-root zygote process that creates isolated_app children for rendering web content. It needs: - CAP_SETUID and CAP_SETGID to change the UID of the new child process. - CAP_SETPCAP to clear the capability bounding set after forking. Test: m Test: angler boots Bug: 21643067 Change-Id: I986fa04be54e812f5dd2afa14e5d2d3e474e2b10