Skip to content

Commit 32e88ed

Browse files
committed
Ensure the ADB-injected CA is not writable by anybody
Because of an ADB bug, user perms are always copied and used as group & other perms, so this means we have to make it not writable by _anybody_.
1 parent aab4d49 commit 32e88ed

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/interceptors/android/android-adb-interceptor.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -150,7 +150,7 @@ export class AndroidAdbInterceptor implements Interceptor {
150150
deviceId,
151151
stringAsStream(certContent.replace('\r\n', '\n')),
152152
certPath,
153-
0o644
153+
0o444
154154
);
155155

156156
await injectSystemCertificate(this.adbClient, deviceId, rootCmd, certPath);

0 commit comments

Comments
 (0)