tree c3453665a18a4de328e584202877332a153c02e8
parent 46f86f11d446a650602057f8a07eba1f609d7fe9
author Nick Kralevich <nnk@google.com> 1327698413 -0800
committer Nick Kralevich <nnk@google.com> 1327698413 -0800

Restrict zygote to system user.

CVE-2011-3918: Address denial of service attack against Android's
zygote process. This change enforces that only UID=system can
directly connect to zygote to spawn processes.

Change-Id: I89f5f05fa44ba8582920b66854df3e79527ae067