| commit | 5fe06cb70cd8f65948dbdbb8f11d7c8dd4879c74 | [log] [tgz] |
|---|---|---|
| author | Tom Cherry <tomcherry@google.com> | Fri May 01 15:34:47 2020 -0700 |
| committer | Tom Cherry <tomcherry@google.com> | Thu Dec 10 10:25:11 2020 -0800 |
| tree | 5bd6204fd485e36a0b8e0fc0f898a6242ebaff84 | |
| parent | 60a08d8cadd19dcd9d32767081259ee4dc646631 [diff] |
logd: use SO_PEERGROUPS when appropriate Logd checks all supplemental groups of a peer socket to see if it may have privileges to read logs. This was previously done by a racy checking of /proc/<pid>/status, but this can now be replaced by SO_PEERGROUPS for kernels 4.13+. Test: SO_PEERGROUPS is successful on CF Test: non-root,system,log groups cannot read logs still Test: new test that does the above check Change-Id: I71f96f7acaf105e836f8fc4fee0ecb96e92242b4