commit 6501712acac44af3bca2923b8f2f75e3f563734a
author Jiyong Park <jiyong@google.com> Fri Apr 01 13:08:53 2022 +0900
committer Jiyong Park <jiyong@google.com> Fri Apr 08 16:35:25 2022 +0900
tree 324deee9168298c63bd96026698a30ad6e3eaf8f
parent 24ad7d5083a6a8166ae84d22d8d51eb19bcb8ee6

run virtualizationservice as system UID

Previously, virtualizationservice had its own UID
`virtualizationservice`. As a result, crosvm, which is spawned by it
also run as the UID. However, that prevented us from applying task
profiles to the crosvm process because joining a process to a cgroup
requires system UID.

To fix that, virtualizationservice now runs as system UID. As a result,
crosvm inherits the same UID.

Bug: 223790172
Bug: 216788146
Test: watch TH

Change-Id: Ia61a86726d7aad050f2a84e8857105ad6fde33d4

apex/virtualizationservice.rc

diff --git a/apex/virtualizationservice.rc b/apex/virtualizationservice.rc
index 7e71105..02b2081 100644
--- a/apex/virtualizationservice.rc
+++ b/apex/virtualizationservice.rc
@@ -14,8 +14,8 @@
 
 service virtualizationservice /apex/com.android.virt/bin/virtualizationservice
     class main
-    user virtualizationservice
-    group virtualizationservice
+    user system
+    group system
     interface aidl android.system.virtualizationservice
     disabled
     oneshot