tree 822006f3908db085b8b98620bca2c6499ec8c11a
parent 5ebced39093d1223566166b8cc6abfe6729c487d
author Nick Kralevich <nnk@google.com> 1327698413 -0800
committer Nick Kralevich <nnk@google.com> 1335558752 -0700

Restrict zygote to system user.

CVE-2011-3918: Address denial of service attack against Android's
zygote process. This change enforces that only UID=system can
directly connect to zygote to spawn processes.

Change-Id: I89f5f05fa44ba8582920b66854df3e79527ae067