Maciej Żenczykowski
3c057e6b7b
Revert "Grant IPC_LOCK capability to bpfloader"
This reverts commit 77494d2b70.
This doesn't apparently work...
Kernel doesn't actually test capabilities, just blindly charges
against user's memlock limit:
//kernel/bpf/syscall.c:
static int bpf_charge_memlock(struct user_struct *user, u32 pages) {
unsigned long memlock_limit = rlimit(RLIMIT_MEMLOCK) >> PAGE_SHIFT;
if (atomic_long_add_return(pages, &user->locked_vm) > memlock_limit) {
atomic_long_sub(pages, &user->locked_vm);
return -EPERM;
}
return 0;
}
Test: N/A, revert
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Icf6d6e8a36e4b9f3771a5ce80e25ef3644ff4e83
|
2020-01-27 15:33:15 +00:00 |
|
Android.bp
|
bpfloader depends on clatd.o
|
2019-03-26 18:11:01 -07:00 |
|
BpfLoader.cpp
|
bpfloader - remove dead code
|
2019-12-30 04:12:36 -08:00 |