commit 88b3468472830bb8161aff163f1622080930ce26
author Andrew Walbran <qwandor@google.com> Wed Dec 15 16:47:54 2021 +0000
committer Andrew Walbran <qwandor@google.com> Wed Dec 22 13:20:23 2021 +0000
tree d07933e07820612aaee085d90398a92a03e020a0
parent 2bf6ca1bb83e7acf655825dffa1641d80771e7b0

Grant crosvm CAP_IPC_LOCK via filesystem config.

Bug: 204298056
Test: Ran test VM, checked /proc/$PID/status of crosvm for CapEff.
Change-Id: I5fd105ac9f4a0bf50b16bfe5e68698245c0f8885

apex/Android.bp

diff --git a/apex/Android.bp b/apex/Android.bp
index a2f272e..f1eeed9 100644
--- a/apex/Android.bp
+++ b/apex/Android.bp
@@ -67,6 +67,7 @@
         "microdroid_bootconfig_full_debuggable",
     ],
     file_contexts: ":com.android.virt-file_contexts",
+    canned_fs_config: "canned_fs_config",
 }
 
 apex_key {

apex/canned_fs_config

diff --git a/apex/canned_fs_config b/apex/canned_fs_config
new file mode 100644
index 0000000..1cf63b6
--- /dev/null
+++ b/apex/canned_fs_config
@@ -0,0 +1 @@
+/bin/crosvm 0 2000 0755 capabilities=0x4000