Make CAP_DAC_OVERRIDE inheritable for using xdelta3 31/113731/2
authorSangyoon Jang <s89.jang@samsung.com>
Wed, 8 Feb 2017 12:34:32 +0000 (21:34 +0900)
committerjongmyeong ko <jongmyeong.ko@samsung.com>
Wed, 8 Feb 2017 12:39:58 +0000 (04:39 -0800)
Currently, xdelta3 has CAP_DAC_OVERRIDE itself by file capability.
This is security hole, because attacker can modify any files using
xdelta3. To prevent this problem, make xdelta3 have CAP_DAC_OVERRIDE
only by inheriting from server.

Change-Id: I76f9416cff0c8b2e54c18093c162f6044c399245
Signed-off-by: Sangyoon Jang <s89.jang@samsung.com>

No differences found