diff options
| author | Daisuke Okitsu <daisuke.x.okitsu@sonyericsson.com> | 2014-11-24 09:37:55 +0100 |
|---|---|---|
| committer | Jeff Sharkey <jsharkey@android.com> | 2014-11-24 08:39:15 -0800 |
| commit | a5a4e9e0cad383f0c14dbe92a60b7d8150ae6b1f (patch) | |
| tree | 3ea9d44eee0606b239c044287f24b0580c1e0217 /libcutils/socket_local_server_unix.cpp | |
| parent | 83d85563c51fa39cb61b836302a8c26fe0e2ace6 (diff) | |
sdcard: mount sdcard with the noexec option
Vold mounts the sdcard with noexec, but the fuse deamon
mounts with exec, so it is still possible to execute
binaries:
/dev/fuse /storage/sdcard1 fuse rw,nosuid,nodev,relatime,
user_id=1023,group_id=1023,default_permissions,allow_other 0 0
/dev/block/vold/179:65 /mnt/media_rw/sdcard1 vfat rw,dirsync,
nosuid,nodev,noexec,relatime,uid=1023,gid=1023,fmask=0007,
dmask=0007,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,
shortname=mixed,utf8,errors=remount-ro 0 0
With this change both vold and fuse mounts with noexec.
(cherry picked from commit f777d6694eecf6e61d9859df2090199863050017)
Change-Id: I66cbfc3a3a89a26958f83577f5e7a5e27f99184e
Diffstat (limited to 'libcutils/socket_local_server_unix.cpp')
0 files changed, 0 insertions, 0 deletions