joy/android_system_bpf
Watch
1
Fork
You've already forked android_system_bpf
 0
Code Issues Pull requests Projects Releases Wiki Activity

Give all users access to CPU time in state bpf maps.

Browse source 
We want to read this from traced_probes, which is AID_NOBODY. And
SELinux does a far more thorough job of controlling access than Unix
permissions do.

Bug: 422976190

Test: ls -l, and checked WIP traced_probes implementation.
Change-Id: I51a6486c5d7bf85f922f79a89a7a7fbdb9bc79f2
This commit is contained in:
Simon MacMullen 2025-06-18 16:25:20 +00:00
commit 5781bd4a22
1 changed files with 20 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

36
loader/bpfloader.rs
View file

@ -25,7 +25,8 @@ use libbpf_rs::{
};
use libbpf_sys::{bpf_map__autocreate, bpf_program__set_type};
use libc::{
mode_t, uname, utsname, S_IRGRP, S_IRUSR, S_IRWXG, S_IRWXO, S_IRWXU, S_ISVTX, S_IWGRP, S_IWUSR,
mode_t, uname, utsname, S_IRGRP, S_IROTH, S_IRUSR, S_IRWXG, S_IRWXO, S_IRWXU, S_ISVTX, S_IWGRP,
S_IWOTH, S_IWUSR,
};
use log::{debug, error, info, warn, Level, LevelFilter, Log, Metadata, Record, SetLoggerError};
use rustutils::system_properties;
@ -206,6 +207,9 @@ const PERM_GRW: mode_t = S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP;
const PERM_GRO: mode_t = S_IRUSR | S_IWUSR | S_IRGRP;
const PERM_GWO: mode_t = S_IRUSR | S_IWUSR | S_IWGRP;
const PERM_UGR: mode_t = S_IRUSR | S_IRGRP;
const PERM_ORW: mode_t = PERM_GRW | S_IROTH | S_IWOTH;
const PERM_ORO: mode_t = PERM_GRO | S_IROTH;
const PERM_OWO: mode_t = PERM_GWO | S_IWOTH;
const GID_ROOT: u32 = AID_ROOT;
const GID_SYSTEM: u32 = AID_SYSTEM;
@ -220,21 +224,21 @@ const FILE_ARR: &[BpfFileDesc] = &[
critical: false,
skip_on_user: false,
maps: &[
MapDesc::new(GID_SYSTEM, PERM_GWO, "cpu_last_pid_map"),
MapDesc::new(GID_SYSTEM, PERM_GWO, "cpu_last_update_map"),
MapDesc::new(GID_SYSTEM, PERM_GWO, "cpu_policy_map"),
MapDesc::new(GID_SYSTEM, PERM_GWO, "freq_to_idx_map"),
MapDesc::new(GID_SYSTEM, PERM_GWO, "nr_active_map"),
MapDesc::new(GID_SYSTEM, PERM_GWO, "pid_task_aggregation_map"),
MapDesc::new(GID_SYSTEM, PERM_GRO, "pid_time_in_state_map"),
MapDesc::new(GID_SYSTEM, PERM_GWO, "pid_tracked_hash_map"),
MapDesc::new(GID_SYSTEM, PERM_GWO, "pid_tracked_map"),
MapDesc::new(GID_SYSTEM, PERM_GWO, "policy_freq_idx_map"),
MapDesc::new(GID_SYSTEM, PERM_GWO, "policy_nr_active_map"),
MapDesc::new(GID_SYSTEM, PERM_GRW, "total_time_in_state_map"),
MapDesc::new(GID_SYSTEM, PERM_GRW, "uid_concurrent_times_map"),
MapDesc::new(GID_SYSTEM, PERM_GRW, "uid_last_update_map"),
MapDesc::new(GID_SYSTEM, PERM_GRW, "uid_time_in_state_map"),
MapDesc::new(GID_SYSTEM, PERM_OWO, "cpu_last_pid_map"),
MapDesc::new(GID_SYSTEM, PERM_OWO, "cpu_last_update_map"),
MapDesc::new(GID_SYSTEM, PERM_OWO, "cpu_policy_map"),
MapDesc::new(GID_SYSTEM, PERM_OWO, "freq_to_idx_map"),
MapDesc::new(GID_SYSTEM, PERM_OWO, "nr_active_map"),
MapDesc::new(GID_SYSTEM, PERM_OWO, "pid_task_aggregation_map"),
MapDesc::new(GID_SYSTEM, PERM_ORO, "pid_time_in_state_map"),
MapDesc::new(GID_SYSTEM, PERM_OWO, "pid_tracked_hash_map"),
MapDesc::new(GID_SYSTEM, PERM_OWO, "pid_tracked_map"),
MapDesc::new(GID_SYSTEM, PERM_OWO, "policy_freq_idx_map"),
MapDesc::new(GID_SYSTEM, PERM_OWO, "policy_nr_active_map"),
MapDesc::new(GID_SYSTEM, PERM_ORW, "total_time_in_state_map"),
MapDesc::new(GID_SYSTEM, PERM_ORW, "uid_concurrent_times_map"),
MapDesc::new(GID_SYSTEM, PERM_ORW, "uid_last_update_map"),
MapDesc::new(GID_SYSTEM, PERM_ORW, "uid_time_in_state_map"),
],
progs: &[
ProgDesc::new(GID_SYSTEM, "tracepoint_power_cpu_frequency"),