| commit | 3beaef8de4e6a5f5fe13440944b41641a53ffc30 | [log] [tgz] |
|---|---|---|
| author | Janis Danisevskis <jdanis@google.com> | Mon Mar 12 15:19:44 2018 -0700 |
| committer | Janis Danisevskis <jdanis@google.com> | Wed Mar 14 14:02:36 2018 -0700 |
| tree | ad87436dfa416d57938ea9511a5cceed5546d126 | |
| parent | bb6377e679dbb6e758af98fc0b65b12cf1f40b34 [diff] |
Fix violation of least privilege principle The confirmationui HAL does not need to run as user system. Bug: 63928580 Test: All required services boot and can access what they need Change-Id: Ic2d6edabf8cca8384a7e0ce49dfc5445a6ec1658
diff --git a/confirmationui/1.0/default/android.hardware.confirmationui@1.0-service.rc b/confirmationui/1.0/default/android.hardware.confirmationui@1.0-service.rc index a278028..c04e55e 100644 --- a/confirmationui/1.0/default/android.hardware.confirmationui@1.0-service.rc +++ b/confirmationui/1.0/default/android.hardware.confirmationui@1.0-service.rc
@@ -1,4 +1,4 @@ service vendor.confirmationui-1-0 /vendor/bin/hw/android.hardware.confirmationui@1.0-service class hal - user system - group system drmrpc + user nobody + group drmrpc