Merge "Update init documentation to reflect fs_config changes"
am: b11afd7741
* commit 'b11afd7741c5e939bf5c6fb47dcadc49e3664f32':
Update init documentation to reflect fs_config changes
This commit is contained in:
commit
80625ed1c3
1 changed files with 10 additions and 3 deletions
|
|
@ -109,9 +109,16 @@ socket <name> <type> <perm> [ <user> [ <group> [ <seclabel> ] ] ]
|
||||||
user <username>
|
user <username>
|
||||||
Change to username before exec'ing this service.
|
Change to username before exec'ing this service.
|
||||||
Currently defaults to root. (??? probably should default to nobody)
|
Currently defaults to root. (??? probably should default to nobody)
|
||||||
Currently, if your process requires linux capabilities then you cannot use
|
As of Android M, processes should use this option even if they
|
||||||
this command. You must instead request the capabilities in-process while
|
require linux capabilities. Previously, to acquire linux
|
||||||
still root, and then drop to your desired uid.
|
capabilities, a process would need to run as root, request the
|
||||||
|
capabilities, then drop to its desired uid. There is a new
|
||||||
|
mechanism through fs_config that allows device manufacturers to add
|
||||||
|
linux capabilities to specific binaries on a file system that should
|
||||||
|
be used instead. This mechanism is described on
|
||||||
|
http://source.android.com/devices/tech/config/filesystem.html. When
|
||||||
|
using this new mechanism, processes can use the user option to
|
||||||
|
select their desired uid without ever running as root.
|
||||||
|
|
||||||
group <groupname> [ <groupname> ]*
|
group <groupname> [ <groupname> ]*
|
||||||
Change to groupname before exec'ing this service. Additional
|
Change to groupname before exec'ing this service. Additional
|
||||||
|
|
|
||||||
Loading…
Add table
Reference in a new issue