From e541aa40acdfc5be15c1551a1c50178e0620a2e5 Mon Sep 17 00:00:00 2001 From: Ken Chen Date: Wed, 9 Feb 2022 10:00:30 +0800 Subject: [PATCH] Change gid of cgroupskb//stats Change gid BPF programs from AID_ROOT to AID_SYSTEM because system_server needs to access them. Bug: 202086915 Test: test in Ib0e935ee2b714ac61daceba6d13fa7a20f97f68f Change-Id: I8c0019f141414994aad2986cc5dfdb7dd027a36a --- bpf_progs/netd.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/bpf_progs/netd.c b/bpf_progs/netd.c index c1a74e735c..8d05757c5b 100644 --- a/bpf_progs/netd.c +++ b/bpf_progs/netd.c @@ -297,12 +297,12 @@ static __always_inline inline int bpf_traffic_account(struct __sk_buff* skb, int return match; } -DEFINE_BPF_PROG("cgroupskb/ingress/stats", AID_ROOT, AID_ROOT, bpf_cgroup_ingress) +DEFINE_BPF_PROG("cgroupskb/ingress/stats", AID_ROOT, AID_SYSTEM, bpf_cgroup_ingress) (struct __sk_buff* skb) { return bpf_traffic_account(skb, BPF_INGRESS); } -DEFINE_BPF_PROG("cgroupskb/egress/stats", AID_ROOT, AID_ROOT, bpf_cgroup_egress) +DEFINE_BPF_PROG("cgroupskb/egress/stats", AID_ROOT, AID_SYSTEM, bpf_cgroup_egress) (struct __sk_buff* skb) { return bpf_traffic_account(skb, BPF_EGRESS); }