From 3beaef8de4e6a5f5fe13440944b41641a53ffc30 Mon Sep 17 00:00:00 2001 From: Janis Danisevskis Date: Mon, 12 Mar 2018 15:19:44 -0700 Subject: [PATCH] Fix violation of least privilege principle The confirmationui HAL does not need to run as user system. Bug: 63928580 Test: All required services boot and can access what they need Change-Id: Ic2d6edabf8cca8384a7e0ce49dfc5445a6ec1658 --- .../default/android.hardware.confirmationui@1.0-service.rc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/confirmationui/1.0/default/android.hardware.confirmationui@1.0-service.rc b/confirmationui/1.0/default/android.hardware.confirmationui@1.0-service.rc index a278028348..c04e55eb67 100644 --- a/confirmationui/1.0/default/android.hardware.confirmationui@1.0-service.rc +++ b/confirmationui/1.0/default/android.hardware.confirmationui@1.0-service.rc @@ -1,4 +1,4 @@ service vendor.confirmationui-1-0 /vendor/bin/hw/android.hardware.confirmationui@1.0-service class hal - user system - group system drmrpc + user nobody + group drmrpc