Can't execute C "system" command on Android 8 Oreo

[Amiad Salton]

.In our Android Service application, we use JNI to invoke C++ code of a
shared library. In this code, we invoke C "system" command to execute
antoher process. This code has worked perfectly on all Android OS and now
it fails on Android 8 Oreo

?Is there any new security or other restriction the prevent to execute
system commands

[Paulo Pinto]

I guess you missed the security improvements on Oreo.

https://android-developers.googleblog.com/2017/12/double-stuffed-security-in-android-oreo.html

https://android-developers.googleblog.com/2017/07/seccomp-filter-in-android-o.html

system() is not part of the allowed functions.

https://android.googlesource.com/platform/bionic/+/master/libc/SYSCALLS.TXT

Post by Amiad Salton
.In our Android Service application, we use JNI to invoke C++ code of a
shared library. In this code, we invoke C "system" command to execute
antoher process. This code has worked perfectly on all Android OS and now
it fails on Android 8 Oreo
?Is there any new security or other restriction the prevent to execute
system commands

['Ryan Prichard' via android-ndk]

An app running on O should be able to invoke system().

system() isn't a system call. It's a libc function that uses other system
calls (looks like vfork and execve).

libc/SYSCALLS.TXT is an input to gensyscalls.py, which auto-generates libc
system call wrapper functions. execve is listed in that file, but vfork is
custom assembly.

https://android.googlesource.com/platform/bionic/+/master/libc/upstream-openbsd/lib/libc/stdlib/system.c
https://android.googlesource.com/platform/bionic/+/master/libc/arch-arm/bionic/vfork.S
https://android.googlesource.com/platform/bionic/+/master/libc/arch-arm/syscalls/execve.S

vfork(), execve(), and system() are all exposed by libc.so:

https://android.googlesource.com/platform/bionic/+/master/libc/libc.map.txt

-Ryan

Post by Paulo Pinto
I guess you missed the security improvements on Oreo.
https://android-developers.googleblog.com/2017/12/double-
stuffed-security-in-android-oreo.html
https://android-developers.googleblog.com/2017/07/
seccomp-filter-in-android-o.html
system() is not part of the allowed functions.
https://android.googlesource.com/platform/bionic/+/master/
libc/SYSCALLS.TXT

Post by Amiad Salton
.In our Android Service application, we use JNI to invoke C++ code of a
shared library. In this code, we invoke C "system" command to execute
antoher process. This code has worked perfectly on all Android OS and now
it fails on Android 8 Oreo
?Is there any new security or other restriction the prevent to execute
system commands
--

You received this message because you are subscribed to the Google Groups
"android-ndk" group.
To unsubscribe from this group and stop receiving emails from it, send an
Visit this group at https://groups.google.com/group/android-ndk.
To view this discussion on the web visit https://groups.google.com/d/
msgid/android-ndk/098ec17d-6772-40b5-b323-671a7680619b%40googlegroups.com
<https://groups.google.com/d/msgid/android-ndk/098ec17d-6772-40b5-b323-671a7680619b%40googlegroups.com?utm_medium=email&utm_source=footer>
.
For more options, visit https://groups.google.com/d/optout.