Permission issue with PION WebRTC under GOMOBILE Android >= 11

[neilyoung]

Hi,

I'm using a GOMOBILE module, which utilizes LiveKit Server SDK, which in turn utilizes PION WebRTC.

There is no problem using this on Android devices <= Android 10, but with Android 11 Google has introduced a new hurdle w.r.t. root permission requirement for dealing with MAC addresses. https://developer.android.com/training/articles/user-data-ids#mac-11-plus

This in turn renders some functions of the PION SDK invalid, namely CreateAnswer, SetRemoteDescription and AddIceCandidate (there might be more, but those are the ones I identified so far).

The error log generated by LifeKit SDK says this when I'm trying to publish video:

I/GoLog: "msg"="could not create answer" "error"="failed to create network: route ip+net: netlinkrib: permission denied"
I/GoLog: "msg"="could not set remote description" "error"="failed to create network: route ip+net: netlinkrib: permission denied"
I/GoLog: "msg"="could not add ICE candidate" "error"="failed to create network: route ip+net: netlinkrib: permission denied"
I/GoLog: "msg"="could not add ICE candidate" "error"="failed to create network: route ip+net: netlinkrib: permission denied"

I wasn't able to isolate the function(s) in PION SDK (I think those are all in webrtc/peerconnection.go), which finally fail that badly, but from LiveKit SDK PION those are called e.g. from here:

• "could not add ICE candidate" - https://github.com/livekit/server-sdk-go/blob/602e75bd81f01faa70066f620b72dfe14d25c064/engine.go#L313

• "could not set remote description" - https://github.com/livekit/server-sdk-go/blob/602e75bd81f01faa70066f620b72dfe14d25c064/engine.go#L300
  https://github.com/livekit/server-sdk-go/blob/602e75bd81f01faa70066f620b72dfe14d25c064/engine.go#L319

• "could not create answer" - https://github.com/livekit/server-sdk-go/blob/602e75bd81f01faa70066f620b72dfe14d25c064/engine.go#L531

I wonder if there would be a way for PION SDK to drop the use of the functions, which potentially fail under Android and replace it casually by the work around, mentioned in the Android SDK link. I know that would rather be a task for the GOMOBILE people, but there this issue is pending since 2020. golang/go#40569 (comment)