ACPR/android_system_core
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge "Close a security hole - do not give world readable/writable access to /data/drm" into ics-mr1

Browse source
This commit is contained in:
James Dong 2012-01-11 16:16:07 -08:00 • committed by Android (Google) Code Review
commit 032afc1d52
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
rootdir/init.rc
View file

@ -175,8 +175,9 @@ on post-fs-data
# create the lost+found directories, so as to enforce our permissions # create the lost+found directories, so as to enforce our permissions
mkdir /data/lost+found 0770 root root mkdir /data/lost+found 0770 root root
# create directory for DRM plug-ins # create directory for DRM plug-ins - give drm the read/write access to
mkdir /data/drm 0774 drm drm # the following directory.
mkdir /data/drm 0770 drm drm
# If there is no fs-post-data action in the init.<device>.rc file, you # If there is no fs-post-data action in the init.<device>.rc file, you
# must uncomment this line, otherwise encrypted filesystems # must uncomment this line, otherwise encrypted filesystems