From c885789257c76ea4479ea36282f5e0a2c7861e26 Mon Sep 17 00:00:00 2001 From: Andrey Artemiev Date: Thu, 2 Jun 2022 23:43:21 +0000 Subject: executor: fixed sandbox 'android' --- executor/common_linux.h | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'executor') diff --git a/executor/common_linux.h b/executor/common_linux.h index b30366a87..48236ce3b 100644 --- a/executor/common_linux.h +++ b/executor/common_linux.h @@ -4163,6 +4163,8 @@ static int do_sandbox_android(void) if (setresgid(UNTRUSTED_APP_GID, UNTRUSTED_APP_GID, UNTRUSTED_APP_GID) != 0) fail("do_sandbox_android: setresgid failed"); + setup_binderfs(); + #if GOARCH_arm || GOARCH_arm64 || GOARCH_386 || GOARCH_amd64 // Will fail() if anything fails. // Must be called when the new process still has CAP_SYS_ADMIN, in this case, @@ -4179,7 +4181,6 @@ static int do_sandbox_android(void) setfilecon(".", SELINUX_LABEL_APP_DATA_FILE); setcon(SELINUX_CONTEXT_UNTRUSTED_APP); - setup_binderfs(); loop(); doexit(1); } -- cgit mrf-deployment