diff --git a/hdc_rust/src/cffi/cmd.cpp b/hdc_rust/src/cffi/cmd.cpp index 48c299574576005c88fdf2540e63b4899523d346..4fcf5ee79b6c9556a919817209870baaf3693c98 100644 --- a/hdc_rust/src/cffi/cmd.cpp +++ b/hdc_rust/src/cffi/cmd.cpp @@ -36,7 +36,7 @@ static bool DropRootPrivileges() { int ret; const char *userName = "shell"; - vector groupsNames = { "shell", "log", "readproc", "file_manager" }; + vector groupsNames = { "shell", "log", "readproc", "file_manager", "user_data_rw" }; struct passwd *user; gid_t *gids = nullptr; diff --git a/src/daemon/etc/hdcd.cfg b/src/daemon/etc/hdcd.cfg index d98bc48efc26fc488026469fab2fb920cf84d46c..2bc63dce77b64fe4effffe2fd1c8dce4923ad2f4 100644 --- a/src/daemon/etc/hdcd.cfg +++ b/src/daemon/etc/hdcd.cfg @@ -75,7 +75,7 @@ "name" : "hdcd", "path" : ["/system/bin/hdcd"], "uid" : "shell", - "gid" : [ "shell", "log", "readproc", "file_manager", "netsys_socket" ], + "gid" : [ "shell", "log", "readproc", "file_manager", "user_data_rw", "netsys_socket" ], "socket" : [{ "name" : "hdcd", "family" : "AF_UNIX", diff --git a/src/daemon/etc/hdcd.root.cfg b/src/daemon/etc/hdcd.root.cfg index 66a429a25e76c48b2affb3abfcc20f770df8410c..19fcd056fe53d3db787c23d8d7459ce71193c332 100644 --- a/src/daemon/etc/hdcd.root.cfg +++ b/src/daemon/etc/hdcd.root.cfg @@ -89,7 +89,7 @@ "name" : "hdcd", "path" : ["/system/bin/hdcd"], "uid" : "root", - "gid" : [ "root", "shell", "log", "readproc", "file_manager" ], + "gid" : [ "root", "shell", "log", "readproc", "file_manager", "user_data_rw" ], "setuid" : true, "socket" : [{ "name" : "hdcd", diff --git a/src/daemon/main.cpp b/src/daemon/main.cpp index 031d5ef65e397711568fb07e692dac8450667fbc..3cbe9b67ff54bebd6f0f57bbff8da51bc6740d58 100644 --- a/src/daemon/main.cpp +++ b/src/daemon/main.cpp @@ -209,7 +209,7 @@ bool DropRootPrivileges() { int ret; const char *userName = "shell"; - vector groupsNames = { "shell", "log", "readproc", "file_manager" }; + vector groupsNames = { "shell", "log", "readproc", "file_manager", "user_data_rw" }; struct passwd *user; gid_t *gids = nullptr;