| commit | e7fd911fd42b1f8bea6a004e2bcc1d2dda4ec718 | [log] [tgz] |
|---|---|---|
| author | Nick Kralevich <nnk@google.com> | Fri Jan 27 13:06:53 2012 -0800 |
| committer | Nick Kralevich <nnk@google.com> | Fri Jan 27 13:06:53 2012 -0800 |
| tree | c3453665a18a4de328e584202877332a153c02e8 | |
| parent | 46f86f11d446a650602057f8a07eba1f609d7fe9 [diff] |
Restrict zygote to system user. CVE-2011-3918: Address denial of service attack against Android's zygote process. This change enforces that only UID=system can directly connect to zygote to spawn processes. Change-Id: I89f5f05fa44ba8582920b66854df3e79527ae067