Nick Kralevich 812b19a425 installd: reduce privileges. ...

Make installd run with fewer privileges. This will help make
exploitation of installd based vulnerabilities more difficult
to perform.

installd now runs with the following privileges:

* CAP_DAC_OVERRIDE
* CAP_CHOWN

These two capabilities are needed to add and remove files
from application's home directories.

* CAP_SETUID
* CAP_SETGID

These permissions are needed to further drop privileges when
running dexopt as the application UID.

"installd" no longer runs with full root privileges.  It cannot,
for example, mount and unmount filesystems, install modules,
perform direct I/O, etc.

Change-Id: Ib407e41e5e4c95f35a5c6a154812c5e8ae3006ed

2012-09-04 14:58:22 -07:00

api

Merge "More improvements to the display manager." into jb-mr1-dev

2012-08-31 15:49:17 -07:00

cmds

installd: reduce privileges.

2012-09-04 14:58:22 -07:00

core

Merge "Minor refactors." into jb-mr1-dev

2012-09-02 07:51:28 -07:00

data

Fix installing applications from non-primary users.

2012-08-27 15:16:33 -07:00

docs

am 2f1ec0db: am cf9e9d62: Design doc change: Update download zips for design bundle and Roboto.

2012-08-24 14:45:46 -07:00

drm

Merge "Let getOriginalMimeType() take a fd passed from drm java applications" into jb-mr1-dev

2012-08-22 14:50:27 -07:00

graphics

Add plumbing for new surface flinger display API.

2012-08-27 14:34:54 -07:00

icu4j

…

include

Add plumbing for new surface flinger display API.

2012-08-27 14:34:54 -07:00

keystore

Add some NullPointerExceptions to AndroidKeyStore

2012-08-31 16:45:24 -07:00

libs

Revert "Revert "Add more support for transformed clip rects and paths""

2012-08-31 20:31:32 -07:00

location

Fix some location issues exposed by CTS.

2012-08-21 16:26:26 -07:00

media

Merge "Improve multi-user broadcasts." into jb-mr1-dev

2012-08-30 14:56:11 -07:00

native

Add plumbing for new surface flinger display API.

2012-08-27 14:34:54 -07:00

nfc-extras

Fix BasicNfcEeTest java package.

2011-12-09 14:35:32 -08:00

obex

Add NOTICE and MODULE_LICENSE_BSD_LIKE for obex

2012-04-06 14:04:31 -07:00

opengl/java

Rename UserId to UserHandle.

2012-08-16 12:46:38 -07:00

packages

Remove Binder.getOrigCallingUid().

2012-08-31 15:11:13 -07:00

policy

Minor refactors.

2012-09-02 07:47:24 -07:00

samples/training/network-usage

cherrypick from ics-mr1 docs: source for nw app Change-Id: If50f407a0e56fa802fe9beedaa650e3a131872b2

2012-08-08 11:27:09 -07:00

sax

…

services

Merge "Minor refactors." into jb-mr1-dev

2012-09-02 07:51:28 -07:00

telephony/java

Unhide some CellSignalStrength methods.

2012-08-28 12:05:16 -07:00

test-runner

Initial draft of high-level multi-display APIs.

2012-08-31 15:42:45 -07:00

tests

Remove Binder.getOrigCallingUid().

2012-08-31 15:11:13 -07:00

tools

Initial draft of high-level multi-display APIs.

2012-08-31 15:42:45 -07:00

voip

Use audio_channel_mask_t more consistently

2012-07-03 08:40:46 -07:00

wifi/java/android/net/wifi

Improve multi-user broadcasts.

2012-08-30 14:33:22 -07:00

Android.mk

Merge "Start implementing concept of "running" users." into jb-mr1-dev

2012-08-29 18:15:07 -07:00

CleanSpec.mk

Telephony: Move AdnRecord.aidl into opt/telephony

2012-08-03 16:47:51 -07:00

MODULE_LICENSE_APACHE2

…

NOTICE

Original DnsSd TxtRecord file

2012-04-04 11:37:35 -07:00

preloaded-classes

Update preloaded-classes for JB

2012-08-12 19:46:51 +09:00

Description

No description provided

5.1 GiB

Languages

Java 77.3%

Kotlin 9.2%

PowerBuilder 6.6%

C++ 5.5%

AIDL 1%