Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Install setresuid()/setresgid() seccomp filter in AppZygote."

Browse Source
This commit is contained in:
Martijn Coenen
2019-01-23 06:26:25 +00:00
committed by Android (Google) Code Review
parent 53ad668c94 6ef1680964
commit d54dfdb2cb
1 changed files with 1 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
core/jni/com_android_internal_os_Zygote.cpp
View File

@@ -493,10 +493,7 @@ static void SetUpSeccompFilter(uid_t uid, bool is_child_zygote) {
// Apply system or app filter based on uid.
if (uid >= AID_APP_START) {
if (is_child_zygote) {
// set_app_zygote_seccomp_filter();
// TODO(b/111434506) install the filter; for now, install the app filter
// which is more restrictive.
set_app_seccomp_filter();
set_app_zygote_seccomp_filter();
} else {
set_app_seccomp_filter();
}
@@ -1645,14 +1642,10 @@ static void com_android_internal_os_Zygote_nativeInstallSeccompUidGidFilter(
return;
}
// TODO(b/111434506) install the filter
/*
bool installed = install_setuidgid_seccomp_filter(uidGidMin, uidGidMax);
if (!installed) {
RuntimeAbort(env, __LINE__, "Could not install setuid/setgid seccomp filter.");
}
*/
}
/**