crosvm: seccomp: allow faccessat2 syscall if it exists

Starting with glibc 2.33 the faccessat2 syscall is used and
only if it doesn't exist (eg kernel older than 5.8) glibc will
default to the older faccessat syscall, so we need to allow it.

Previously this syscall has been enabled on a per-component
basis after testing, but this one does a bulk enable when
faccessat is used on all architectures.

See glibc commit 3d3ab573a5 ("Linux: Use faccessat2 to implement
faccessat (bug 18683")

BUG=b:187795855
TEST=Local builds; CQ.

Change-Id: I1f17e82e8c416b0fa2c43342731e9ea8394c47fa
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3097212
Reviewed-by: Keiichi Watanabe <keiichiw@chromium.org>
Reviewed-by: Manoj Gupta <manojgupta@chromium.org>
Tested-by: kokoro <noreply+kokoro@google.com>
Commit-Queue: Manoj Gupta <manojgupta@chromium.org>
This commit is contained in:
Adrian Ratiu 2021-08-16 11:40:40 +03:00 committed by Commit Bot
parent ee4b58ef42
commit a0320d286d

View file

@ -9,6 +9,7 @@ readlinkat: 1
getdents64: 1
name_to_handle_at: 1
faccessat: 1
faccessat2: 1
gettid: 1
clock_gettime: 1
timerfd_create: 1