841946be56
Also adjust permissions on /dev/hw_random to allow prng_seeder group read access. Manual testing protocol: * Verify prng_seeder daemon is running and has the correct label and uid/gid. * Verify prng_seeder socket present and has correct label and permissions * Verify no SELinux denials * strace a libcrypto process and verify it reads seeding data from prng_seeder (e.g. strace bssl rand -hex 1024) * strace seeder daemon to observe incoming connections (e.g. strace -f -p `pgrep prng_seeder`) * Kill daemon, observe that init restarts it * strace again and observe clients now seed from new instance Bug: 243933553 Test: Manual - see above Change-Id: I4d526844b232fc2a1fa5ffd701ca5bc5c09e7e96 Merged-In: I4d526844b232fc2a1fa5ffd701ca5bc5c09e7e96 (cherry picked from commit |
||
---|---|---|
.. | ||
arch-x86 | ||
arch-x86_64 | ||
include | ||
include_outside_system/cutils | ||
Android.bp | ||
KernelLibcutilsTest.xml | ||
MODULE_LICENSE_APACHE2 | ||
NOTICE | ||
OWNERS | ||
TEST_MAPPING | ||
android_get_control_env.h | ||
android_get_control_file.cpp | ||
android_get_control_file_test.cpp | ||
android_get_control_socket_test.cpp | ||
android_reboot.cpp | ||
ashmem-dev.cpp | ||
ashmem-host.cpp | ||
ashmem_test.cpp | ||
canned_fs_config.cpp | ||
config_utils.cpp | ||
fs.cpp | ||
fs_config.cpp | ||
fs_config.h | ||
fs_config_test.cpp | ||
hashmap.cpp | ||
iosched_policy.cpp | ||
klog.cpp | ||
load_file.cpp | ||
multiuser.cpp | ||
multiuser_test.cpp | ||
native_handle.cpp | ||
native_handle_test.cpp | ||
partition_utils.cpp | ||
properties.cpp | ||
properties_test.cpp | ||
qtaguid.cpp | ||
record_stream.cpp | ||
sched_policy_test.cpp | ||
socket_inaddr_any_server_unix.cpp | ||
socket_inaddr_any_server_windows.cpp | ||
socket_local_client_unix.cpp | ||
socket_local_server_unix.cpp | ||
socket_local_unix.h | ||
socket_network_client_unix.cpp | ||
socket_network_client_windows.cpp | ||
sockets.cpp | ||
sockets_test.cpp | ||
sockets_unix.cpp | ||
sockets_windows.cpp | ||
str_parms.cpp | ||
str_parms_test.cpp | ||
strlcpy.c | ||
threads.cpp | ||
trace-container.cpp | ||
trace-dev.cpp | ||
trace-dev.inc | ||
trace-dev_test.cpp | ||
trace-host.cpp | ||
uevent.cpp |