mirrors/crosvm
1
0
Fork 0
mirror of https://chromium.googlesource.com/crosvm/crosvm synced 2024-12-24 11:58:41 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

crosvm: add getpid and prlimit to seccomp

Browse source 
This is needed to make sure seccomp work with glibc 2.27

BUG=chromium:897477
TEST=None

Change-Id: I101aa07bffd8db2b449be1a697dafcd7d6f1cb58
Reviewed-on: https://chromium-review.googlesource.com/1294729
Commit-Ready: Yunlian Jiang <yunlian@chromium.org>
Tested-by: Yunlian Jiang <yunlian@chromium.org>
Reviewed-by: Mike Frysinger <vapier@chromium.org>
This commit is contained in:
Yunlian Jiang 2018-10-22 13:20:34 -07:00 committed by chrome-bot
parent 15503e236e
commit 31c20fdcce
5 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
io_jail/src/test_filter.policy
View file

@ -1,6 +1,7 @@
close: 1
exit: 1
futex: 1
getpid: 1
lseek: 1
read: 1
write: 1

1
seccomp/arm/9p_device.policy
View file

@ -54,3 +54,4 @@ ftruncate64: 1
fchown: arg1 == 0xffffffff && arg2 == 0xffffffff
statfs64: 1
fstatat64: 1
getpid: 1

1
seccomp/arm/9s.policy
View file

@ -61,3 +61,4 @@ rmdir: 1
fchown: arg1 == 0xffffffff && arg2 == 0xffffffff
mremap: 1
fstatat64: 1
prlimit64: arg2 == 0 && arg3 != 0

1
seccomp/x86_64/9s.policy
View file

@ -60,3 +60,4 @@ mkdir: 1
mremap: 1
rename: 1
newfstatat: 1
prlimit64: arg2 == 0 && arg3 != 0

1
tests/plugin.policy
View file

@ -40,6 +40,7 @@ memfd_create: 1
mmap: 1
open: 1
openat: 1
prlimit64: arg2 == 0 && arg3 != 0
recvmsg: 1
restart_syscall: 1
rt_sigaction: 1