Merge "Expand seccomp whitelist"

am: fd77a331eb Change-Id: I824c984b907e43248d6eba6259f31f4aab7d64db
2017-02-08 18:10:28 +00:00
parent a3b4985ad4 fd77a331eb
commit 1201ce98dd
1 changed files with 3 additions and 0 deletions
--- a/core/jni/android_os_seccomp.cpp
+++ b/core/jni/android_os_seccomp.cpp
@@ -216,6 +216,9 @@ bool set_seccomp_filter() {
    AllowSyscall(f, 8);   // __NR_creat
    AllowSyscall(f, 10);  // __NR_unlink

+    // b/35059702
+    AllowSyscall(f, 196); // __NR_lstat64
+
    Trap(f);

    return install_filter(f);