From 08cd23e732a0a292f0fffb6b7ac19d960f03e1d4 Mon Sep 17 00:00:00 2001 From: Josh Gao Date: Thu, 8 Feb 2018 16:46:55 -0800 Subject: [PATCH] debuggerd: update policy for recent sigaction changes. Commit 3e235911 in bionic switched LP32's sigaction implementation over to using the rt_sigaction syscall, matching LP64. Update our seccomp policy to match. Bug: http://b/73119572 Test: debuggerd_test32 Change-Id: I0a662a1c874298d434468d2dcdb4ebf9f276110c --- debuggerd/seccomp_policy/crash_dump.arm.policy | 2 +- debuggerd/seccomp_policy/crash_dump.arm64.policy | 2 +- debuggerd/seccomp_policy/crash_dump.policy.def | 3 +-- debuggerd/seccomp_policy/crash_dump.x86.policy | 2 +- debuggerd/seccomp_policy/crash_dump.x86_64.policy | 2 +- 5 files changed, 5 insertions(+), 6 deletions(-) diff --git a/debuggerd/seccomp_policy/crash_dump.arm.policy b/debuggerd/seccomp_policy/crash_dump.arm.policy index c64e28824..b1f459da8 100644 --- a/debuggerd/seccomp_policy/crash_dump.arm.policy +++ b/debuggerd/seccomp_policy/crash_dump.arm.policy @@ -22,6 +22,7 @@ recvmsg: 1 process_vm_readv: 1 tgkill: 1 rt_sigprocmask: 1 +rt_sigaction: 1 rt_tgsigqueueinfo: 1 prctl: arg0 == PR_GET_NO_NEW_PRIVS || arg0 == 0x53564d41 madvise: 1 @@ -30,7 +31,6 @@ munmap: 1 getuid32: 1 fstat64: 1 mmap2: arg2 in PROT_READ|PROT_WRITE -sigaction: 1 geteuid32: 1 getgid32: 1 getegid32: 1 diff --git a/debuggerd/seccomp_policy/crash_dump.arm64.policy b/debuggerd/seccomp_policy/crash_dump.arm64.policy index 0c689bbd6..e5e7afb2c 100644 --- a/debuggerd/seccomp_policy/crash_dump.arm64.policy +++ b/debuggerd/seccomp_policy/crash_dump.arm64.policy @@ -21,6 +21,7 @@ recvmsg: 1 process_vm_readv: 1 tgkill: 1 rt_sigprocmask: 1 +rt_sigaction: 1 rt_tgsigqueueinfo: 1 prctl: arg0 == PR_GET_NO_NEW_PRIVS || arg0 == 0x53564d41 madvise: 1 @@ -29,7 +30,6 @@ munmap: 1 getuid: 1 fstat: 1 mmap: arg2 in PROT_READ|PROT_WRITE -rt_sigaction: 1 geteuid: 1 getgid: 1 getegid: 1 diff --git a/debuggerd/seccomp_policy/crash_dump.policy.def b/debuggerd/seccomp_policy/crash_dump.policy.def index dadffac8d..b78c94a2b 100644 --- a/debuggerd/seccomp_policy/crash_dump.policy.def +++ b/debuggerd/seccomp_policy/crash_dump.policy.def @@ -29,6 +29,7 @@ process_vm_readv: 1 tgkill: 1 rt_sigprocmask: 1 +rt_sigaction: 1 rt_tgsigqueueinfo: 1 #define PR_SET_VMA 0x53564d41 @@ -42,12 +43,10 @@ munmap: 1 getuid: 1 fstat: 1 mmap: arg2 in PROT_READ|PROT_WRITE -rt_sigaction: 1 #else getuid32: 1 fstat64: 1 mmap2: arg2 in PROT_READ|PROT_WRITE -sigaction: 1 #endif // Needed for logging. diff --git a/debuggerd/seccomp_policy/crash_dump.x86.policy b/debuggerd/seccomp_policy/crash_dump.x86.policy index c64e28824..b1f459da8 100644 --- a/debuggerd/seccomp_policy/crash_dump.x86.policy +++ b/debuggerd/seccomp_policy/crash_dump.x86.policy @@ -22,6 +22,7 @@ recvmsg: 1 process_vm_readv: 1 tgkill: 1 rt_sigprocmask: 1 +rt_sigaction: 1 rt_tgsigqueueinfo: 1 prctl: arg0 == PR_GET_NO_NEW_PRIVS || arg0 == 0x53564d41 madvise: 1 @@ -30,7 +31,6 @@ munmap: 1 getuid32: 1 fstat64: 1 mmap2: arg2 in PROT_READ|PROT_WRITE -sigaction: 1 geteuid32: 1 getgid32: 1 getegid32: 1 diff --git a/debuggerd/seccomp_policy/crash_dump.x86_64.policy b/debuggerd/seccomp_policy/crash_dump.x86_64.policy index 0c689bbd6..e5e7afb2c 100644 --- a/debuggerd/seccomp_policy/crash_dump.x86_64.policy +++ b/debuggerd/seccomp_policy/crash_dump.x86_64.policy @@ -21,6 +21,7 @@ recvmsg: 1 process_vm_readv: 1 tgkill: 1 rt_sigprocmask: 1 +rt_sigaction: 1 rt_tgsigqueueinfo: 1 prctl: arg0 == PR_GET_NO_NEW_PRIVS || arg0 == 0x53564d41 madvise: 1 @@ -29,7 +30,6 @@ munmap: 1 getuid: 1 fstat: 1 mmap: arg2 in PROT_READ|PROT_WRITE -rt_sigaction: 1 geteuid: 1 getgid: 1 getegid: 1