Merge "Expand seccomp whitelist"

am: 10e7aed13f Change-Id: I8060b31a8ac20ddd77b7139c5a3bbd8d146dbc27
2017-02-07 22:59:34 +00:00
parent 3d6f878b75 10e7aed13f
commit 0ab0d47516
1 changed files with 4 additions and 0 deletions
--- a/core/jni/android_os_seccomp.cpp
+++ b/core/jni/android_os_seccomp.cpp
@@ -212,6 +212,10 @@ bool set_seccomp_filter() {
    // b/34908783
    AllowSyscall(f, 250); // __NR_epoll_create

+    // b/34979910
+    AllowSyscall(f, 8);   // __NR_creat
+    AllowSyscall(f, 10);  // __NR_unlink
+
    Trap(f);

    return install_filter(f);