tree 86bf2ff8202b62d71db3c07add8f93a0089b9942
parent a02a1f1dc837f22226499d9856a949fb180d099a
author Jie Jiang <jiejiang@chromium.org> 1599019236 +0900
committer Commit Bot <commit-bot@chromium.org> 1600301711 +0000

init: put UE into its own net_cls cgroup

This patch puts update_engine into its own net_cls cgroup, and assigns
handle 1:1 to this cgroup, so that we can match the packets from
update_engine using iptables.

BUG=b:167479541
TEST=able to match egress packets from update_engine using:
  `iptables -t mangle -A OUTPUT -m cgroup --cgroup 0x10001`

Cq-Depend: chromium:2388542
Change-Id: Id9c3ced473430a27f9719f0bd3fd727e9b1d0ea2
Reviewed-on: https://chromium-review.googlesource.com/c/aosp/platform/system/update_engine/+/2387886
Tested-by: Jie Jiang <jiejiang@chromium.org>
Commit-Queue: Jie Jiang <jiejiang@chromium.org>
Reviewed-by: Amin Hassani <ahassani@chromium.org>