ACPR/android_system_core
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge "Expand seccomp whitelist"

Browse source
This commit is contained in:
Treehugger Robot 2017-01-31 22:44:42 +00:00 • committed by Gerrit Code Review
commit 301e7e2cdb
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
init/seccomp.cpp
View file

@ -223,6 +223,14 @@ bool set_seccomp_filter() {
AllowSyscall(f, 33); // __NR_access AllowSyscall(f, 33); // __NR_access
AllowSyscall(f, 195); // __NR_stat64 AllowSyscall(f, 195); // __NR_stat64
// b/34813887
AllowSyscall(f, 5); // __NR_open
AllowSyscall(f, 141); // __NR_getdents
AllowSyscall(f, 217); // __NR_getdents64
// b/34719286
AllowSyscall(f, 351); // __NR_eventfd
// arm32-on-arm64 only filter - autogenerated from bionic syscall usage // arm32-on-arm64 only filter - autogenerated from bionic syscall usage
for (size_t i = 0; i < arm_filter_size; ++i) for (size_t i = 0; i < arm_filter_size; ++i)
f.push_back(arm_filter[i]); f.push_back(arm_filter[i]);