Merge "Expand seccomp whitelist" am: fd77a331eb am: 1201ce98dd

am: e9799155c9 Change-Id: If9652ab58b37d2011251345bf5e85afdb3bac4d6
2017-02-08 20:17:35 +00:00
parent 8d2d9d758f e9799155c9
commit e0c1cde9c2
1 changed files with 3 additions and 0 deletions
--- a/core/jni/android_os_seccomp.cpp
+++ b/core/jni/android_os_seccomp.cpp
@@ -216,6 +216,9 @@ bool set_seccomp_filter() {
    AllowSyscall(f, 8);   // __NR_creat
    AllowSyscall(f, 10);  // __NR_unlink

+    // b/35059702
+    AllowSyscall(f, 196); // __NR_lstat64
+
    Trap(f);

    return install_filter(f);