commit bd8a6addcf66ed7a630e8201f38780e6f78eb0eb
author Treehugger Robot <android-test-infra-autosubmit@system.gserviceaccount.com> Thu Aug 24 08:06:43 2023 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu Aug 24 08:06:43 2023 +0000
tree bc2ab667fa873cf552f301ee6ddb7c46d60bf6b8
parent 0028d6159730449305c966d90a7f2ace74aeaf2f
parent cfe87cd6b0aaf0936e83ca8d5dba6348f5c780ac

Merge "Disable module autoloading" into main

microdroid/init.rc

diff --git a/microdroid/init.rc b/microdroid/init.rc
index 42033d6..0af48a6 100644
--- a/microdroid/init.rc
+++ b/microdroid/init.rc
@@ -12,6 +12,11 @@
 
 # Cgroups are mounted right before early-init using list from /etc/cgroups.json
 on early-init
+    # Android doesn't need kernel module autoloading, and it causes SELinux
+    # denials.  So disable it by setting modprobe to the empty string.  Note: to
+    # explicitly set a sysctl to an empty string, a trailing newline is needed.
+    write /proc/sys/kernel/modprobe \n
+
     # set RLIMIT_NICE to allow priorities from 19 to -20
     setrlimit nice 40 40