commit 12ab187885d6bb52fe584158c494f96f6f703ce7
author Suren Baghdasaryan <surenb@google.com> Fri Oct 18 11:16:52 2019 -0700
committer Suren Baghdasaryan <surenb@google.com> Thu Nov 07 18:15:04 2019 +0000
tree 1f82397250baca29928cc538647ef0b9dbb2593f
parent 7f44a83d8f389393292449d52d0b2550d751adac

lmkd: Restrict process record modifications to the client that created it

Associate each registered process with the PID of the lmkd client that
registered it to prevent one client from updating records of another
client.

Bug: 129011369
Test: boot and verify native service registration
Change-Id: Id8ca7bb6314df225d04da6469b523d2cdc237eaa
Signed-off-by: Suren Baghdasaryan <surenb@google.com>

lmkd/lmkd.rc

diff --git a/lmkd/lmkd.rc b/lmkd/lmkd.rc
index 76b6055..982a188 100644
--- a/lmkd/lmkd.rc
+++ b/lmkd/lmkd.rc
@@ -4,5 +4,5 @@
     group lmkd system readproc
     capabilities DAC_OVERRIDE KILL IPC_LOCK SYS_NICE SYS_RESOURCE
     critical
-    socket lmkd seqpacket 0660 system system
+    socket lmkd seqpacket+passcred 0660 system system
     writepid /dev/cpuset/system-background/tasks