From e3bda36e0be2ad690ec48666d56eefcb26489378 Mon Sep 17 00:00:00 2001 From: Andrei Diea Date: Tue, 5 Sep 2023 19:29:13 +0000 Subject: [PATCH] debuggerd: add socksetopt to seccomp policy aosp/2734054 added socket timeouts for nonblocking liblog ops. seccomp policy was not updated so tests failed when unallowed socksetopt syscall was made. Bug: 298420226 Test: atest debuggerd_test Change-Id: Iace232ec8b94e5d316d344abc5d866fe314607e0 Signed-off-by: Andrei Diea --- debuggerd/seccomp_policy/crash_dump.arm.policy | 1 + debuggerd/seccomp_policy/crash_dump.arm64.policy | 1 + debuggerd/seccomp_policy/crash_dump.policy.def | 1 + debuggerd/seccomp_policy/crash_dump.riscv64.policy | 1 + debuggerd/seccomp_policy/crash_dump.x86.policy | 1 + debuggerd/seccomp_policy/crash_dump.x86_64.policy | 1 + 6 files changed, 6 insertions(+) diff --git a/debuggerd/seccomp_policy/crash_dump.arm.policy b/debuggerd/seccomp_policy/crash_dump.arm.policy index 8fd03c427..a70ab203d 100644 --- a/debuggerd/seccomp_policy/crash_dump.arm.policy +++ b/debuggerd/seccomp_policy/crash_dump.arm.policy @@ -20,6 +20,7 @@ getdents64: 1 faccessat: 1 recvmsg: 1 recvfrom: 1 +setsockopt: 1 sysinfo: 1 process_vm_readv: 1 tgkill: 1 diff --git a/debuggerd/seccomp_policy/crash_dump.arm64.policy b/debuggerd/seccomp_policy/crash_dump.arm64.policy index 8241f0ee4..adf87380e 100644 --- a/debuggerd/seccomp_policy/crash_dump.arm64.policy +++ b/debuggerd/seccomp_policy/crash_dump.arm64.policy @@ -19,6 +19,7 @@ getdents64: 1 faccessat: 1 recvmsg: 1 recvfrom: 1 +setsockopt: 1 sysinfo: 1 process_vm_readv: 1 tgkill: 1 diff --git a/debuggerd/seccomp_policy/crash_dump.policy.def b/debuggerd/seccomp_policy/crash_dump.policy.def index 0cb8e081d..972a57545 100644 --- a/debuggerd/seccomp_policy/crash_dump.policy.def +++ b/debuggerd/seccomp_policy/crash_dump.policy.def @@ -26,6 +26,7 @@ faccessat: 1 recvmsg: 1 recvfrom: 1 sysinfo: 1 +setsockopt: 1 process_vm_readv: 1 diff --git a/debuggerd/seccomp_policy/crash_dump.riscv64.policy b/debuggerd/seccomp_policy/crash_dump.riscv64.policy index 281e231b0..94a56772a 100644 --- a/debuggerd/seccomp_policy/crash_dump.riscv64.policy +++ b/debuggerd/seccomp_policy/crash_dump.riscv64.policy @@ -19,6 +19,7 @@ getdents64: 1 faccessat: 1 recvmsg: 1 recvfrom: 1 +setsockopt: 1 sysinfo: 1 process_vm_readv: 1 tgkill: 1 diff --git a/debuggerd/seccomp_policy/crash_dump.x86.policy b/debuggerd/seccomp_policy/crash_dump.x86.policy index 8fd03c427..a70ab203d 100644 --- a/debuggerd/seccomp_policy/crash_dump.x86.policy +++ b/debuggerd/seccomp_policy/crash_dump.x86.policy @@ -20,6 +20,7 @@ getdents64: 1 faccessat: 1 recvmsg: 1 recvfrom: 1 +setsockopt: 1 sysinfo: 1 process_vm_readv: 1 tgkill: 1 diff --git a/debuggerd/seccomp_policy/crash_dump.x86_64.policy b/debuggerd/seccomp_policy/crash_dump.x86_64.policy index 281e231b0..94a56772a 100644 --- a/debuggerd/seccomp_policy/crash_dump.x86_64.policy +++ b/debuggerd/seccomp_policy/crash_dump.x86_64.policy @@ -19,6 +19,7 @@ getdents64: 1 faccessat: 1 recvmsg: 1 recvfrom: 1 +setsockopt: 1 sysinfo: 1 process_vm_readv: 1 tgkill: 1