| commit | 13807cb12a9afce34c2ecf664036df6be83f656e | [log] [tgz] |
|---|---|---|
| author | Lutz Justen <[email protected]> | Tue Jan 03 17:11:55 2017 +0100 |
| committer | Lutz Justen <[email protected]> | Thu Jan 05 14:22:59 2017 +0100 |
| tree | 3619acdc266173e3cd38d156f8ed4620ff0a31e9 | |
| parent | dc9cb4f308a3930c346a2ba0d8cec5119e1983ce [diff] |
minijail: Add ability to keep supplementary gids. Adds the ability to keep supplementary group ids. If an outer process sets a saved uid, this allows changing to the saved uid in an inner, minijailed process. Without this, the inner jail would try to clear supplementary groups (setgroups(0, NULL)), which may not be allowed due to missing caps. Bug: 33838120 TEST=Tested using the authpolicy project in Chrome OS Change-Id: I9e98332324753922a4ac881b46233258067eaeae