tree f6b5dbec36e9028e8d5ca99253a286dcc4e8b00d
parent 0bfbf665b91e30b2683b71b178aaed6831e5fa7e
author Maciej Żenczykowski <maze@google.com> 1580116082 -0800
committer Maciej Żenczykowski <maze@google.com> 1580116083 -0800

Grant IPC_LOCK capability to bpfloader

(instead of explicit memlock limit)

This reduces chance for memory allocation failures.

Any bpfloader failure is a critical boot time failure
(since without eBPF initializing properly netd will crash and
device will enter crash loop).

Test: builds, atest
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I5ed0118d63c53100e7431324914bf22e9870abfe