Grant TUNSETOFFLOAD to crosvm for running ferrochrome
For running ferrochrome with VmLauncherApp, found it requires to grant
TUNSETOFFLOAD to crosvm.
Bug: 340376953
Test: atest MicrodroidTests
Change-Id: Iba251cb72da64d46224751cb97368835f7c0f68c
diff --git a/private/crosvm.te b/private/crosvm.te
index cddab36..0c2acb9 100644
--- a/private/crosvm.te
+++ b/private/crosvm.te
@@ -135,7 +135,7 @@
is_flag_enabled(RELEASE_AVF_ENABLE_NETWORK, `
# Allow crosvm to deal with file descriptors of TAP interfaces.
allow crosvm tun_device:chr_file rw_file_perms;
- allowxperm crosvm tun_device:chr_file ioctl { TUNGETIFF TUNSETVNETHDRSZ };
+ allowxperm crosvm tun_device:chr_file ioctl { TUNGETIFF TUNSETOFFLOAD TUNSETVNETHDRSZ };
allow crosvm self:udp_socket create_socket_perms;
allowxperm crosvm self:udp_socket ioctl SIOCGIFMTU;
allow crosvm vmnic:fd use;