From 3e6356834f71c78e41711fb456613849bc81b200 Mon Sep 17 00:00:00 2001 From: Nick Kralevich Date: Fri, 27 Nov 2015 18:08:22 -0800 Subject: [PATCH] fs_config: remove setuid bit from librank Anyone wanting to call /system/xbin/librank can execute "su" beforehand. There's no need for it to be setuid root. Bug: 25739721 Change-Id: Ie3d68701397d21e901bf1ec17b4b4a9f12128d2d --- libcutils/fs_config.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/libcutils/fs_config.c b/libcutils/fs_config.c index f4454bb5d..d4994db96 100644 --- a/libcutils/fs_config.c +++ b/libcutils/fs_config.c @@ -132,10 +132,9 @@ static const struct fs_path_config android_files[] = { { 00750, AID_ROOT, AID_SHELL, 0, "data/nativetest/*" }, { 00750, AID_ROOT, AID_SHELL, 0, "data/nativetest64/*" }, - /* the following four files are INTENTIONALLY set-uid, but they + /* the following three files are INTENTIONALLY set-uid, but they * are NOT included on user builds. */ { 04750, AID_ROOT, AID_SHELL, 0, "system/xbin/su" }, - { 06755, AID_ROOT, AID_ROOT, 0, "system/xbin/librank" }, { 06755, AID_ROOT, AID_ROOT, 0, "system/xbin/procmem" }, { 04770, AID_ROOT, AID_RADIO, 0, "system/bin/pppd-ril" },