Merge "Expand seccomp whitelist" am: fd77a331eb

am: 1201ce98dd Change-Id: I87fa2d6962ebb288c8c79488cfaf73485fca7bbf
2017-02-08 18:29:08 +00:00
parent 3e086be542 1201ce98dd
commit e9799155c9
1 changed files with 3 additions and 0 deletions
--- a/core/jni/android_os_seccomp.cpp
+++ b/core/jni/android_os_seccomp.cpp
@@ -216,6 +216,9 @@ bool set_seccomp_filter() {
    AllowSyscall(f, 8);   // __NR_creat
    AllowSyscall(f, 10);  // __NR_unlink

+    // b/35059702
+    AllowSyscall(f, 196); // __NR_lstat64
+
    Trap(f);

    return install_filter(f);