init.rc: Add nodev,noexec,nosuid to /config

This change adds some additional flags to the /config mount. This is to
reduce the number of mounts with unnecessary privileges.

Bug: 73255020
Test: aosp_sailfish still boots
Test: CtsAppSecurityHostTestCases {ExternalStorageHostTest,StorageHostTest}
Change-Id: If3409d917cdf76a67ebfb7c4035a3ae8fee6189f
This commit is contained in:
Luis Hector Chavez 2018-02-14 08:35:01 -08:00
parent 5a33a4bff6
commit 465c8f307f
1 changed files with 1 additions and 1 deletions

View File

@ -85,7 +85,7 @@ on init
mount tmpfs tmpfs /mnt mode=0755,uid=0,gid=1000
restorecon_recursive /mnt
mount configfs none /config
mount configfs none /config nodev noexec nosuid
chmod 0770 /config/sdcardfs
chown system package_info /config/sdcardfs