seccomp: allow fstatat64/statx syscalls on arm

On 32bit arm systems, starting with glibc 2.33, the fstatat64
syscall is used to fix a y2038 bug and statx is also called
for 64bit->32bit datastructure conversion.

See this upstream glibc 2.33 commit range for more details:
d892723830..aa03f722f3.

Example failures (only on 32bit arm):
type=SECCOMP comm="mtpd" exe="/usr/sbin/mtpd" sig=0
arch=40000028 syscall=327 code=0x7ffc0000
type=SECCOMP comm="mtpd" exe="/usr/sbin/mtpd" sig=0
arch=40000028 syscall=397 code=0x7ffc0000

BUG=b:187795855
TEST=Local builds; CQ.

Change-Id: I003feeaa75552770920cdf9969a393940c5e997b
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3113972
Tested-by: kokoro <noreply+kokoro@google.com>
Commit-Queue: Daniel Verkamp <dverkamp@chromium.org>
Reviewed-by: Keiichi Watanabe <keiichiw@chromium.org>
Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
This commit is contained in:
Adrian Ratiu 2021-08-24 17:32:37 +03:00 committed by Commit Bot
parent 5e9b5dfe58
commit b08a9e2953
2 changed files with 3 additions and 0 deletions

View file

@ -7,6 +7,7 @@
fallocate: 1
fdatasync: 1
fstat64: 1
fstatat64: 1
fsync: 1
ftruncate64: 1
_llseek: 1

View file

@ -61,7 +61,9 @@ socket: arg0 == 1 && arg1 == 0x80001 && arg2 == 0
_llseek: 1
ftruncate64: 1
stat64: 1
statx: 1
fstat64: 1
fstatat64: 1
getdents: 1
getdents64: 1
sysinfo: 1