From c885789257c76ea4479ea36282f5e0a2c7861e26 Mon Sep 17 00:00:00 2001
From: Andrey Artemiev <artemiev@google.com>
Date: Thu, 2 Jun 2022 23:43:21 +0000
Subject: executor: fixed sandbox 'android'

---
 pkg/csource/generated.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'pkg')

diff --git a/pkg/csource/generated.go b/pkg/csource/generated.go
index 4f53bc197..65c326dde 100644
--- a/pkg/csource/generated.go
+++ b/pkg/csource/generated.go
@@ -9300,6 +9300,8 @@ static int do_sandbox_android(void)
 	if (setresgid(UNTRUSTED_APP_GID, UNTRUSTED_APP_GID, UNTRUSTED_APP_GID) != 0)
 		fail("do_sandbox_android: setresgid failed");
 
+	setup_binderfs();
+
 #if GOARCH_arm || GOARCH_arm64 || GOARCH_386 || GOARCH_amd64
 	set_app_seccomp_filter();
 #endif
@@ -9311,7 +9313,6 @@ static int do_sandbox_android(void)
 	setfilecon(".", SELINUX_LABEL_APP_DATA_FILE);
 	setcon(SELINUX_CONTEXT_UNTRUSTED_APP);
 
-	setup_binderfs();
 	loop();
 	doexit(1);
 }
-- 
cgit mrf-deployment