diff --git a/bpfloader/bpfloader.rc b/bpfloader/bpfloader.rc
index 0d92cd8..1d6248e 100644
--- a/bpfloader/bpfloader.rc
+++ b/bpfloader/bpfloader.rc
@@ -27,6 +27,12 @@
 
 service bpfloader /system/bin/bpfloader
     capabilities CHOWN SYS_ADMIN NET_ADMIN
+    # The following group memberships are a workaround for lack of DAC_OVERRIDE
+    # and allow us to open (among other things) files that we created and are
+    # no longer root owned (due to CHOWN) but still have group read access to
+    # one of the following groups.  This is not perfect, but a more correct
+    # solution requires significantly more effort to implement.
+    group root graphics network_stack net_admin net_bw_acct net_bw_stats net_raw system
     #
     # Set RLIMIT_MEMLOCK to 1GiB for bpfloader
     #
diff --git a/libbpf_android/Loader.cpp b/libbpf_android/Loader.cpp
index b93c8f0..7c5b5cb 100644
--- a/libbpf_android/Loader.cpp
+++ b/libbpf_android/Loader.cpp
@@ -30,9 +30,9 @@
 #include <sys/wait.h>
 #include <unistd.h>
 
-// This is BpfLoader v0.22
+// This is BpfLoader v0.23
 #define BPFLOADER_VERSION_MAJOR 0u
-#define BPFLOADER_VERSION_MINOR 22u
+#define BPFLOADER_VERSION_MINOR 23u
 #define BPFLOADER_VERSION ((BPFLOADER_VERSION_MAJOR << 16) | BPFLOADER_VERSION_MINOR)
 
 #include "bpf/BpfUtils.h"