summaryrefslogtreecommitdiff
path: root/cmds/app_process
diff options
context:
space:
mode:
authorJosh Gao <jmgao@google.com>2017-01-03 13:29:03 -0800
committerJosh Gao <jmgao@google.com>2017-01-17 13:55:20 -0800
commit92517e4c035f3c94f46b642798cccf24ce774135 (patch)
treefcb90148f29a86283f1504921f952823d9ed3f83 /cmds/app_process
parentb9eb093c3cb49c3ac44823d5a0d818e66b9bbcd3 (diff)
app_process: don't use PR_SET_NO_NEW_PRIVS.
selinux should provide equivalent protection, and this prevents transitioning to a helper binary for crash dumping. Bug: http://b/30705528 Change-Id: I64b05236931d418f268b193418e937ab6b0985e0
Diffstat (limited to 'cmds/app_process')
-rw-r--r--cmds/app_process/app_main.cpp4
1 files changed, 0 insertions, 4 deletions
diff --git a/cmds/app_process/app_main.cpp b/cmds/app_process/app_main.cpp
index d5580acce4f8..0ea141c292dd 100644
--- a/cmds/app_process/app_main.cpp
+++ b/cmds/app_process/app_main.cpp
@@ -184,10 +184,6 @@ static const char ZYGOTE_NICE_NAME[] = "zygote";
int main(int argc, char* const argv[])
{
- if (prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0) < 0) {
- LOG_ALWAYS_FATAL("PR_SET_NO_NEW_PRIVS failed: %s", strerror(errno));
- }
-
if (!LOG_NDEBUG) {
String8 argv_String;
for (int i = 0; i < argc; ++i) {