diff options
| author | Zim <zezeozue@google.com> | 2020-01-20 14:16:14 +0000 |
|---|---|---|
| committer | Zim <zezeozue@google.com> | 2020-01-22 17:54:45 +0000 |
| commit | 6ca090e6b0e96d392cc46b305d526e1decba0547 (patch) | |
| tree | 8d49eb4d7a0e0478fcd9736e655a294af0d53108 /trusty/coverage/coverage_test.cpp | |
| parent | f5a329f1a4dde66821945af15d5a42aa4a76eee0 (diff) | |
Harden /mnt/pass_through permission bits
It previously had 0755 permission bits
With such permissive bits, an unauthorized app can access a file using
the /mnt/pass_through path for instance even if access via /storage
would have been restricted.
It is now 0700
TODO: Change ACL for /mnt/user from 0755 to 0700 in vold only when
FUSE flag is on. Changing it with FUSE off breaks accessing /sdcard
because /sdcard is eventually a symlink to /mnt/user/0/primary
Test: adb shell ls -d /mnt/pass_through
Bug: 135341433
Change-Id: I3ea9655c6b8c6b4f847b34a2d3b96784a8f4a160
Diffstat (limited to 'trusty/coverage/coverage_test.cpp')
0 files changed, 0 insertions, 0 deletions