am ba900f2e: am fb69c2e2: Merge "init.rc: setup qtaguid group ownership of ctrl and stat files"
* commit 'ba900f2e708f0b654cdaa827804cbb21af4e4fb4': init.rc: setup qtaguid group ownership of ctrl and stat files
This commit is contained in:
commit
a444041547
|
@ -120,6 +120,12 @@ loglevel 3
|
|||
write /dev/cpuctl/apps/bg_non_interactive/cpu.rt_runtime_us 700000
|
||||
write /dev/cpuctl/apps/bg_non_interactive/cpu.rt_period_us 1000000
|
||||
|
||||
# qtaguid will limit access to specific data based on group memberships.
|
||||
# net_bw_acct grants impersonation of socket owners.
|
||||
# net_bw_stats grants access to other apps' detailed tagged-socket stats.
|
||||
chown root net_bw_acct /proc/net/xt_qtaguid/ctrl
|
||||
chown root net_bw_stats /proc/net/xt_qtaguid/stats
|
||||
|
||||
# Allow everybody to read the xt_qtaguid resource tracking misc dev.
|
||||
# This is needed by any process that uses socket tagging.
|
||||
chmod 0644 /dev/xt_qtaguid
|
||||
|
|
Loading…
Reference in New Issue