Merge "Expand seccomp whitelist" am: 10e7aed13f am: 0ab0d47516 am: 53e6c94c0b

am: ce8f7cb388 Change-Id: Ia626354e255a0e8bc66529174460e53ddf72f067
2017-02-07 23:52:03 +00:00
parent 7544631c83 ce8f7cb388
commit f4872e4110
1 changed files with 4 additions and 0 deletions
--- a/core/jni/android_os_seccomp.cpp
+++ b/core/jni/android_os_seccomp.cpp
@@ -212,6 +212,10 @@ bool set_seccomp_filter() {
    // b/34908783
    AllowSyscall(f, 250); // __NR_epoll_create

+    // b/34979910
+    AllowSyscall(f, 8);   // __NR_creat
+    AllowSyscall(f, 10);  // __NR_unlink
+
    Trap(f);

    return install_filter(f);