From 39ff0ae0f66d7bc1499b30c9f75e187d329382ec Mon Sep 17 00:00:00 2001
From: Jeff Sharkey <jsharkey@android.com>
Date: Fri, 30 Aug 2013 13:58:13 -0700
Subject: [PATCH] Only check caller when deriving permissions.

Bug: 10547597
Change-Id: Ied909f9047c2567e93dde0f4658d6e4b9ff161ab
---
 sdcard/sdcard.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/sdcard/sdcard.c b/sdcard/sdcard.c
index 330d555b5..9a1dd17b7 100644
--- a/sdcard/sdcard.c
+++ b/sdcard/sdcard.c
@@ -488,6 +488,11 @@ static void derive_permissions_locked(struct fuse* fuse, struct node *parent,
 
 /* Return if the calling UID holds sdcard_rw. */
 static bool get_caller_has_rw_locked(struct fuse* fuse, const struct fuse_in_header *hdr) {
+    /* No additional permissions enforcement */
+    if (fuse->derive == DERIVE_NONE) {
+        return true;
+    }
+
     appid_t appid = multiuser_get_app_id(hdr->uid);
     return hashmapContainsKey(fuse->appid_with_rw, (void*) appid);
 }