android_system_core/include/private
Nick Kralevich c3df8d7562 Make su 04750
Currently, /system/xbin/su is world executable. Prior to SELinux
enforcement, anyone (including third party apps) could run su.
The su code itself checks to see if the calling UID is root or shell.

Rather than relying on enforcement within the su binary, modify the
binary so it has group=shell, and remove world-execute permission.
This helps avoid some annoying SELinux denial messages as third party
apps call su on userdebug/eng builds.

Change-Id: I61c9231bb7e201d14ee3a5b6fe81b3fa7b12599f
2014-06-08 15:14:42 -07:00
..
pixelflinger Merge "AArch64: Correction of struct surface_t" 2013-12-16 19:50:17 +00:00
android_filesystem_capability.h android_filesystem_config.h: change ping and run-as 2013-03-01 13:18:41 -08:00
android_filesystem_config.h Make su 04750 2014-06-08 15:14:42 -07:00