Confirmed users
85
edits
(→Code) |
|||
| Line 120: | Line 120: | ||
! Group | ! Group | ||
! Reason | ! Reason | ||
! Note | |||
|- | |- | ||
| AID_SYSTEM | | AID_SYSTEM | ||
| allows access to filesystem with '''system''' as group | | allows access to filesystem with '''system''' as group | ||
| | |||
|- | |- | ||
| AID_MOUNT | | AID_MOUNT | ||
| allows access to /dev/socket/vold (volume deamon) | | allows access to /dev/socket/vold (volume deamon) | ||
| | |||
|- | |- | ||
| AID_INPUT | | AID_INPUT | ||
| allows access to /dev/input/* | | allows access to /dev/input/* | ||
| this should be checked at some point if it exposes any additional risk | |||
|- | |- | ||
| AID_INET | | AID_INET | ||
| allows calling '''socket()''' | | allows calling '''socket()''' | ||
| | |||
|- | |- | ||
| AID_NET_BT | | AID_NET_BT | ||
| allows creating bluetooth sockets | | allows creating bluetooth sockets | ||
| | |||
|- | |- | ||
| AID_NET_ADMIN | | AID_NET_ADMIN | ||
| allows calling '''setsockopt()''' | | allows calling '''setsockopt()''' | ||
| | |||
|} | |} | ||