diff options
author | Nick Kralevich <nnk@google.com> | 2016-03-03 15:20:39 -0800 |
---|---|---|
committer | Nick Kralevich <nnk@google.com> | 2016-03-03 15:24:29 -0800 |
commit | bb8b4814df6123b9a411ff7224a35761def9ece7 (patch) | |
tree | 87970320a545cd6e884a394f3759ef8b467fa4a1 /tools/aapt2/java/JavaClassGenerator.cpp | |
parent | 2e54da0d4af2decb2f9a9bd007132ae401e4b11d (diff) |
Am.java: Use write-only file descriptors
Use write only file descriptors for am commands. Having read-write
file descriptors isn't needed, and not all SELinux app domains have
read access to /data/local/tmp file descriptors.
Addresses the following denial:
avc: denied { read } for path="/data/local/tmp/foo" dev="dm-2"
ino=654084 scontext=u:r:system_app:s0
tcontext=u:object_r:shell_data_file:s0 tclass=file permissive=0
Steps to reproduce:
adb shell ps | grep settings
adb shell am dumpheap PID_FROM_ABOVE /data/local/tmp/settings.hat
Expected:
1) command works
Actual:
1) SELinux denial and no settings.hat output.
Bug: 27472701
Change-Id: Id8df0c5a41046b405444e14c70075c986d9936c3
Diffstat (limited to 'tools/aapt2/java/JavaClassGenerator.cpp')
0 files changed, 0 insertions, 0 deletions