commit 20f16a3b96b991255f83699c4bfd913ce481629f
author Steven Moreland <smoreland@google.com> Tue Apr 11 21:33:31 2023 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue Apr 11 21:33:31 2023 +0000
tree b526055828794de65a98dece8144373af220c06d
parent 331874cdfb152d3e23d49e90ca7c8a2917334efb
parent f0a3354f3821080f59228d0e89cc37d0cfb35767

Merge "Explicit init .rc user."

authfs/service/authfs_service.rc

diff --git a/authfs/service/authfs_service.rc b/authfs/service/authfs_service.rc
index 409e91c..bc67c83 100644
--- a/authfs/service/authfs_service.rc
+++ b/authfs/service/authfs_service.rc
@@ -3,3 +3,4 @@
     socket authfs_service stream 0666 root system
     # SYS_ADMIN capability allows to mount FUSE filesystem
     capabilities SYS_ADMIN
+    user root

microdroid_manager/microdroid_manager.rc

diff --git a/microdroid_manager/microdroid_manager.rc b/microdroid_manager/microdroid_manager.rc
index 97d14b5..e257547 100644
--- a/microdroid_manager/microdroid_manager.rc
+++ b/microdroid_manager/microdroid_manager.rc
@@ -11,4 +11,5 @@
     # CAP_SETCAP is required to allow microdroid_manager to drop capabilities
     #   before executing the payload
     capabilities AUDIT_CONTROL SYS_ADMIN SYS_BOOT SETPCAP
+    user root
     socket vm_payload_service stream 0666 system system