diff --git a/init/seccomp.cpp b/init/seccomp.cpp index 6c8521782..a98835dfc 100644 --- a/init/seccomp.cpp +++ b/init/seccomp.cpp @@ -223,6 +223,14 @@ bool set_seccomp_filter() { AllowSyscall(f, 33); // __NR_access AllowSyscall(f, 195); // __NR_stat64 + // b/34813887 + AllowSyscall(f, 5); // __NR_open + AllowSyscall(f, 141); // __NR_getdents + AllowSyscall(f, 217); // __NR_getdents64 + + // b/34719286 + AllowSyscall(f, 351); // __NR_eventfd + // arm32-on-arm64 only filter - autogenerated from bionic syscall usage for (size_t i = 0; i < arm_filter_size; ++i) f.push_back(arm_filter[i]);