diff options
| author | 2022-02-09 11:09:24 +0800 | |
|---|---|---|
| committer | 2022-02-09 03:47:18 +0000 | |
| commit | 5c5b682b6d3b5630e259528be875af1eb0c0be3f (patch) | |
| tree | c3aa28a8f9689b51b19a275a2948c33069b781e9 /libs/androidfw/StringPool.cpp | |
| parent | cd2473616efa9db1d581efa2e4e4fbc3c1917872 (diff) | |
Add system_server to net_admin group
This allows system_server to search/read skfilter BPF programs. Skfilter
BPF programs status were previously dumped by Netd. In Android T, the
related code are mainlined and dumped by system_server process.
system_server needs to be in net_admin group so that it can read program
status.
$ adb root; adb shell ls -l /sys/fs/bpf/
-r--r----- 1 root net_admin ... prog_netd_skfilter_allowlist_xtbpf
-r--r----- 1 root net_admin ... prog_netd_skfilter_denylist_xtbpf
-r--r----- 1 root net_admin ... prog_netd_skfilter_egress_xtbpf
-r--r----- 1 root net_admin ... prog_netd_skfilter_ingress_xtbpf
Bug: 202086915
Test: test in Ib0e935ee2b714ac61daceba6d13fa7a20f97f68f
Change-Id: I8c48230a5da6873eee7d0ba183cb83e1d92cd8f6
Diffstat (limited to 'libs/androidfw/StringPool.cpp')
0 files changed, 0 insertions, 0 deletions