joy/android_system_bpf
Watch
1
Fork
You've already forked android_system_bpf
 0
Code Issues Pull requests Projects Releases Wiki Activity

Grant IPC_LOCK capability to bpfloader

Browse source 
(instead of explicit memlock limit)

This reduces chance for memory allocation failures.

Any bpfloader failure is a critical boot time failure
(since without eBPF initializing properly netd will crash and
device will enter crash loop).

Test: builds, atest
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I5ed0118d63c53100e7431324914bf22e9870abfe
This commit is contained in:
Maciej Żenczykowski 2020-01-27 01:08:02 -08:00
commit 77494d2b70
1 changed files with 1 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

7
bpfloader/bpfloader.rc
View file

@ -1,9 +1,4 @@
service bpfloader /system/bin/bpfloader
class main
capabilities SYS_ADMIN
# Set RLIMIT_MEMLOCK to 64MB for bpfloader
# Actually only 8MB is needed, but since bpfloader runs as root, it shares
# the global rlimit. Once bpfloader is running as its own user in the
# future, it will have dedicated rlimit to itself and this can be 8MB.
rlimit memlock 67108864 67108864
capabilities SYS_ADMIN IPC_LOCK
oneshot