commit 669f7388dff2718515570fa25cc89a7acb284dde
author Maciej Żenczykowski <maze@google.com> Thu Feb 13 13:08:30 2020 -0800
committer Maciej Żenczykowski <maze@google.com> Thu Feb 13 13:08:40 2020 -0800
tree a817bd59958805ecca176647a02bf8e010279381
parent 672b0e7aae928e83f2a3e70d47b49a89a95a1315

grant bpfloader CAP_CHOWN

so that it can change the uid/gid of pinned bpf progs and maps

Test: build, atest
Bug: 149434314
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Id23f9caaddf620d4e99d970523f0a9768826e0d7

bpfloader/bpfloader.rc

diff --git a/bpfloader/bpfloader.rc b/bpfloader/bpfloader.rc
index e8da02d..836ec63 100644
--- a/bpfloader/bpfloader.rc
+++ b/bpfloader/bpfloader.rc
@@ -1,6 +1,6 @@
 service bpfloader /system/bin/bpfloader
     class main
-    capabilities SYS_ADMIN
+    capabilities CHOWN SYS_ADMIN
     #
     # Set RLIMIT_MEMLOCK to 1GiB for bpfloader
     #