Merge "Expand seccomp whitelist" am: fd77a331eb am: 1201ce98dd am: e9799155c9

am: e0c1cde9c2 Change-Id: Iadf2fa37a64074f306b5b6ddb4d8c81644c3383d
2017-02-08 20:39:08 +00:00
parent 00f033f234 e0c1cde9c2
commit 722ec540a2
1 changed files with 3 additions and 0 deletions
--- a/core/jni/android_os_seccomp.cpp
+++ b/core/jni/android_os_seccomp.cpp
@@ -216,6 +216,9 @@ bool set_seccomp_filter() {
    AllowSyscall(f, 8);   // __NR_creat
    AllowSyscall(f, 10);  // __NR_unlink

+    // b/35059702
+    AllowSyscall(f, 196); // __NR_lstat64
+
    Trap(f);

    return install_filter(f);