No description
Find a file
Maciej Żenczykowski 3c057e6b7b Revert "Grant IPC_LOCK capability to bpfloader"
This reverts commit 77494d2b70.

This doesn't apparently work...

Kernel doesn't actually test capabilities, just blindly charges
against user's memlock limit:

//kernel/bpf/syscall.c:

static int bpf_charge_memlock(struct user_struct *user, u32 pages) {
  unsigned long memlock_limit = rlimit(RLIMIT_MEMLOCK) >> PAGE_SHIFT;

  if (atomic_long_add_return(pages, &user->locked_vm) > memlock_limit) {
    atomic_long_sub(pages, &user->locked_vm);
    return -EPERM;
  }
  return 0;
}

Test: N/A, revert
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Icf6d6e8a36e4b9f3771a5ce80e25ef3644ff4e83
2020-01-27 15:33:15 +00:00
bpfloader Revert "Grant IPC_LOCK capability to bpfloader" 2020-01-27 15:33:15 +00:00
libbpf_android BpfUtils - remove some spurious things 2020-01-24 22:00:10 +00:00
progs bpf_helpers - add more const annotations 2020-01-24 18:53:10 -08:00
.clang-format Replace clang-format with symlink. 2019-01-18 14:26:33 -08:00
Android.bp C++17 is the default now. 2018-12-03 09:36:31 -08:00
MODULE_LICENSE_APACHE2 Fix the build problem with bpf project 2018-10-16 21:17:12 -07:00
NOTICE Fix the build problem with bpf project 2018-10-16 21:17:12 -07:00
OWNERS OWNERS: +smoreland +connoro -fengc -joelaf 2020-01-10 15:42:06 -08:00
PREUPLOAD.cfg Fix the build problem with bpf project 2018-10-16 21:17:12 -07:00