Merge "Expand seccomp whitelist" am: 10e7aed13f

am: 0ab0d47516 Change-Id: Id7512df1f0df56f73352c82a3ad55eb5360ebd91
2017-02-07 23:03:32 +00:00
parent ac3f482f15 0ab0d47516
commit 53e6c94c0b
1 changed files with 4 additions and 0 deletions
--- a/core/jni/android_os_seccomp.cpp
+++ b/core/jni/android_os_seccomp.cpp
@@ -212,6 +212,10 @@ bool set_seccomp_filter() {
    // b/34908783
    AllowSyscall(f, 250); // __NR_epoll_create

+    // b/34979910
+    AllowSyscall(f, 8);   // __NR_creat
+    AllowSyscall(f, 10);  // __NR_unlink
+
    Trap(f);

    return install_filter(f);