ACPR/android_system_core
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge "Update docs around capabilities and root processes" am: 583b616ba8

Browse source 
Original change: https://android-review.googlesource.com/c/platform/system/core/+/2356702

Change-Id: Ie18aeb7b4ae79adcebaa545bc2b796f07afcfdf6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Treehugger Robot 2022-12-15 20:03:43 +00:00 • committed by Automerger Merge Worker
commit 6cf486cd75
1 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
init/README.md
View file

@ -195,8 +195,10 @@ runs the service.
capability without the "CAP\_" prefix, like "NET\_ADMIN" or "SETPCAP". See
http://man7.org/linux/man-pages/man7/capabilities.7.html for a list of Linux
capabilities.
If no capabilities are provided, then all capabilities are removed from this service, even if it
runs as root.
If no capabilities are provided, then behaviour depends on the user the service runs under:
* if it's root, then the service will run with all the capabitilies (note: whether the
service can actually use them is controlled by selinux);
* otherwise all capabilities will be dropped.
`class <name> [ <name>\* ]`
> Specify class names for the service. All services in a
@ -410,7 +412,7 @@ runs the service.
using this new mechanism, processes can use the user option to
select their desired uid without ever running as root.
As of Android O, processes can also request capabilities directly in their .rc
files. See the "capabilities" option below.
files. See the "capabilities" option above.
`writepid <file> [ <file>\* ]`
> Write the child's pid to the given files when it forks. Meant for