android_packages_modules_Co.../staticlibs/native/bpfmapjni
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Maciej Żenczykowski c350db788a switch SynchronizeKernelRCU back to jni - but from BpfMap
we can't use java for this, because pre-U-QPR2 does not include:
  https://android-review.googlesource.com/c/platform/system/sepolicy/+/2821590
  system_server dontaudit key_socket getopt

so we'll spew lots of:
  11-08 07:52:43.776 1469 1469 I auditd : type=1400 audit(0.0:4): avc: denied { getopt } for comm="system_server" scontext=u:r:system_server:s0 tcontext=u:r:system_server:s0 tclass=key_socket permissive=0
  11-08 07:52:44.360 1469 1469 I auditd : type=1400 audit(0.0:5): avc: denied { getopt } for comm="NetworkStats" scontext=u:r:system_server:s0 tcontext=u:r:system_server:s0 tclass=key_socket permissive=0
  11-08 07:52:44.508 1469 1469 I auditd : type=1400 audit(0.0:7): avc: denied { getopt } for comm="android.bg" scontext=u:r:system_server:s0 tcontext=u:r:system_server:s0 tclass=key_socket permissive=0
and the like.

This is due to Java's Os.close() in:
  libcore/luni/src/main/java/libcore/io/BlockGuardOs.java;l=100
calling:
  if (fd.isSocket$()) if (isLingerSocket(fd)) ...

Test: TreeHugger
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Ib87fa5e8f0dfd9fbbccb25fb58a9fa78d6a07111
2023-11-09 11:08:58 +00:00
..
Android.bp Revert "Allow BpfMap to be accessed from NetworkStack" 2023-05-04 10:18:46 +00:00
com_android_net_module_util_BpfMap.cpp switch SynchronizeKernelRCU back to jni - but from BpfMap 2023-11-09 11:08:58 +00:00
com_android_net_module_util_TcUtils.cpp TcUtils jni: jobject clazz -> jclass clazz 2023-10-04 19:15:53 +00:00