commit 1acf7a0cf815b7a993412f75fb3af7d808f82436
author Mark Salyzyn <salyzyn@google.com> Tue Jan 14 12:22:28 2020 -0800
committer Mark Salyzyn <salyzyn@google.com> Wed Jan 15 09:08:48 2020 -0800
tree 301a2eeb652e7b3b7b0d6a8dd540c8de854f2542
parent bd6f9881333c291b64fc865f4bbca4f78192b08f

llkd: requires sys_admin permissions

As a result of commit f8a00cef17206ecd1b30d3d9f99e10d9fa707aa7
("proc: restrict kernel stack dumps to root")
the userdebug feature where llkd can monitor for live lock
signatures in the stack traces broke.

So now userdebug variant of llkd requires sys_admin permissions.

Signed-off-by: Mark Salyzyn <salyzyn@google.com>
Test: llkd_unit_test
Bug: 147486902
Change-Id: I31572afa08daa490a69783855bce55313eaed96c

llkd/llkd-debuggable.rc

diff --git a/llkd/llkd-debuggable.rc b/llkd/llkd-debuggable.rc
index 724cb5e..4b11b1c 100644
--- a/llkd/llkd-debuggable.rc
+++ b/llkd/llkd-debuggable.rc
@@ -13,7 +13,7 @@
     disabled
     user llkd
     group llkd readproc
-    capabilities KILL IPC_LOCK SYS_PTRACE DAC_OVERRIDE
+    capabilities KILL IPC_LOCK SYS_PTRACE DAC_OVERRIDE SYS_ADMIN
     file /dev/kmsg w
     file /proc/sysrq-trigger w
     writepid /dev/cpuset/system-background/tasks