diff options
| author | Josh Gao <jmgao@google.com> | 2017-01-03 13:29:03 -0800 |
|---|---|---|
| committer | Josh Gao <jmgao@google.com> | 2017-01-17 13:55:20 -0800 |
| commit | 92517e4c035f3c94f46b642798cccf24ce774135 (patch) | |
| tree | fcb90148f29a86283f1504921f952823d9ed3f83 /cmds/app_process/app_main.cpp | |
| parent | b9eb093c3cb49c3ac44823d5a0d818e66b9bbcd3 (diff) | |
app_process: don't use PR_SET_NO_NEW_PRIVS.
selinux should provide equivalent protection, and this prevents
transitioning to a helper binary for crash dumping.
Bug: http://b/30705528
Change-Id: I64b05236931d418f268b193418e937ab6b0985e0
Diffstat (limited to 'cmds/app_process/app_main.cpp')
| -rw-r--r-- | cmds/app_process/app_main.cpp | 4 |
1 files changed, 0 insertions, 4 deletions
diff --git a/cmds/app_process/app_main.cpp b/cmds/app_process/app_main.cpp index d5580acce4f8..0ea141c292dd 100644 --- a/cmds/app_process/app_main.cpp +++ b/cmds/app_process/app_main.cpp @@ -184,10 +184,6 @@ static const char ZYGOTE_NICE_NAME[] = "zygote"; int main(int argc, char* const argv[]) { - if (prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0) < 0) { - LOG_ALWAYS_FATAL("PR_SET_NO_NEW_PRIVS failed: %s", strerror(errno)); - } - if (!LOG_NDEBUG) { String8 argv_String; for (int i = 0; i < argc; ++i) { |