Merge "Expand seccomp whitelist"

2017-02-07 22:50:43 +00:00
parent ed5c217fc0 c47dd7cf0c
commit 10e7aed13f
1 changed files with 4 additions and 0 deletions
--- a/core/jni/android_os_seccomp.cpp
+++ b/core/jni/android_os_seccomp.cpp
@@ -212,6 +212,10 @@ bool set_seccomp_filter() {
    // b/34908783
    AllowSyscall(f, 250); // __NR_epoll_create

+    // b/34979910
+    AllowSyscall(f, 8);   // __NR_creat
+    AllowSyscall(f, 10);  // __NR_unlink
+
    Trap(f);

    return install_filter(f);