Merge "Expand seccomp whitelist" am: 10e7aed13f am: 0ab0d47516

am: 53e6c94c0b Change-Id: I4f6e9e4c705505861c7b61dcc2c36f3d997a402d
2017-02-07 23:08:00 +00:00
parent 63073e0ae8 53e6c94c0b
commit ce8f7cb388
1 changed files with 4 additions and 0 deletions
--- a/core/jni/android_os_seccomp.cpp
+++ b/core/jni/android_os_seccomp.cpp
@@ -212,6 +212,10 @@ bool set_seccomp_filter() {
    // b/34908783
    AllowSyscall(f, 250); // __NR_epoll_create

+    // b/34979910
+    AllowSyscall(f, 8);   // __NR_creat
+    AllowSyscall(f, 10);  // __NR_unlink
+
    Trap(f);

    return install_filter(f);