commit 87ba1f12a162cf44b326c6f699c842b3ac1307b1
author Inseob Kim <inseob@google.com> Tue Apr 27 14:56:05 2021 +0900
committer Inseob Kim <inseob@google.com> Tue Apr 27 16:52:02 2021 +0900
tree 642bd0bd35be98854645998d77d81efc7b2d4b09
parent 1d5c4d9069393fd9300c8932acec051aa517a7cf

Create /data/local/tmp and add test writing to it

Bug: 185767624
Test: atest MicrodroidHostTestCases
Change-Id: Iba9c640e4e8e535f861836be97b6aa0830f86e8c

microdroid/init.rc

diff --git a/microdroid/init.rc b/microdroid/init.rc
index f304d00..15f9a47 100644
--- a/microdroid/init.rc
+++ b/microdroid/init.rc
@@ -128,6 +128,11 @@
 
     start tombstoned
 
+    # For security reasons, /data/local/tmp should always be empty.
+    # Do not place files or directories in /data/local/tmp
+    mkdir /data/local 0751 root root encryption=Require
+    mkdir /data/local/tmp 0771 shell shell
+
 service ueventd /system/bin/ueventd
     class core
     critical