tree dfdd8d3b270a5967a46db5d071a61a608b375b15
parent cd153076dc27b9a53fddec35eb050f44239d5af3
author Mark Salyzyn <salyzyn@google.com> 1427325113 -0700
committer Mark Salyzyn <salyzyn@google.com> 1427820288 -0700

run-as: bracket capability

- do not assume that caller has granted effective bits in capabilities
- only elevate capabilities when needed
- suppress capabilities before exec when called as shell,shell,shell
- some Android coding standard cleanup

Bug: 19908228
Change-Id: Ibe3d1c1a0fdcb54c41d7a72395e50ad749df98ce