diff options
| author | Zim <zezeozue@google.com> | 2020-01-31 16:26:13 +0000 |
|---|---|---|
| committer | Zim <zezeozue@google.com> | 2020-01-31 16:26:13 +0000 |
| commit | a67b40bc2a8d94413aa6d726bdde23563f7344d0 (patch) | |
| tree | a56dd484a2c5b3dfd385667355d2f84b8da4c942 /trusty/coverage/coverage.cpp | |
| parent | 274bd807a6e6c2f99a6822f615848b4b7cf8af49 (diff) | |
Harden /mnt/pass_through paths
Only the FUSE daemon (with media_rw gid) needs access to paths on
/mnt/pass_through. And even then, it only needs execute access on the
dirs, since there will always be a bind mount either from sdcardfs or
the lower filesystem on it and that bind mount correctly handles ACLs
for the FUSE daemon.
Test: manual
Bug: 135341433
Change-Id: I999451e095da355e6247e9e18fb6fe1ab8fc45d6
Diffstat (limited to 'trusty/coverage/coverage.cpp')
0 files changed, 0 insertions, 0 deletions