tag 3ddfc2a7fdc055761507dc63dc09b90ce4c4d5b0
tagger The Android Open Source Project <initial-contribution@android.com> Wed Feb 19 15:38:03 2020 -0800
object b1ff3f1bc3589b27271fc463bafd3803a8bb7a50

Android R Preview 1 (RPP1.200123.016)

commit b1ff3f1bc3589b27271fc463bafd3803a8bb7a50
author Hungming Chen <nuccachen@google.com> Wed Feb 05 17:27:16 2020 +0800
committer Maciej Żenczykowski <maze@google.com> Wed Feb 05 03:59:15 2020 -0800
tree 2be7ee53178f28c0c6ff254bcc0f176c22e3494e
parent 41b2ae161c86236418264c62d717fd5db83013fc

Change group owner and permission of tethering eBPF map for network stack

The default tethering eBPF map was only allowed to be accessed by
processes with root. But network stack process doesn't run with
root so it is not able to access the map.

So the group owner and permission of the map need to be changed to
NETWORK_STACK and allow network stack process to read/write the map.

Test: build and check that both group owner and the group permission of
the maps are as expected, network_stack and group read/write.

$ adb shell ls -l /sys/fs/bpf | egrep -e "offload(.*)map"
-rw-rw---- 1 root network_stack [..] map_offload_tether_ingress_map

Change-Id: I6627d01a5e2998a298dbd40215d45e3b6e776276