init.rc: Add nodev,noexec,nosuid to /config
This change adds some additional flags to the /config mount. This is to reduce the number of mounts with unnecessary privileges. Bug: 73255020 Test: aosp_sailfish still boots Test: CtsAppSecurityHostTestCases {ExternalStorageHostTest,StorageHostTest} Change-Id: If3409d917cdf76a67ebfb7c4035a3ae8fee6189f
This commit is contained in:
parent
5a33a4bff6
commit
465c8f307f
|
@ -85,7 +85,7 @@ on init
|
|||
mount tmpfs tmpfs /mnt mode=0755,uid=0,gid=1000
|
||||
restorecon_recursive /mnt
|
||||
|
||||
mount configfs none /config
|
||||
mount configfs none /config nodev noexec nosuid
|
||||
chmod 0770 /config/sdcardfs
|
||||
chown system package_info /config/sdcardfs
|
||||
|
||||
|
|
Loading…
Reference in New Issue