Prevent apps directory from being deleted by attacker 85/76185/1
authorHwankyu Jhun <h.jhun@samsung.com>
Thu, 23 Jun 2016 05:27:27 +0000 (14:27 +0900)
committerHwankyu Jhun <h.jhun@samsung.com>
Thu, 23 Jun 2016 05:49:54 +0000 (14:49 +0900)
Now, the app process can delete the /run/aul/apps directory.
The /run/aul directory mode is changed to 0755.

Change-Id: I6de28fe8433f8ca2ea213f2c22626ef9973d27ac
Signed-off-by: Hwankyu Jhun <h.jhun@samsung.com>
packaging/aul.service

index 603d032..7c479ec 100644 (file)
@@ -5,6 +5,7 @@ DefaultDependencies=false
 [Service]
 Type=oneshot
 RemainAfterExit=yes
+ExecStart=/usr/bin/mkdir -p -m 0755 /run/aul
 ExecStart=/usr/bin/mkdir -p -m go+w /run/aul/apps
 ExecStart=/usr/bin/mkdir -p -Z User::Home -m go+w /run/aul/daemons