Skip to content
This repository was archived by the owner on Nov 8, 2023. It is now read-only.

Commit c80af7f

Browse files
enh-googleGerrit Code Review
authored andcommitted
Merge "Explicitly add open/stat64 to the seccomp common whitelist."
2 parents 34d11e5 + 33e0799 commit c80af7f

File tree

1 file changed

+6
-8
lines changed

1 file changed

+6
-8
lines changed

libc/SECCOMP_WHITELIST_COMMON.TXT

Lines changed: 6 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,7 @@ int ioprio_set:ioprio_set(int which, int who, int ioprio) arm64,x86_64,mips64
3232
pid_t gettid:gettid() all
3333
int futex:futex(int *uaddr, int futex_op, int val, const struct timespec *timeout, int *uaddr2, int val3) all
3434
int clone:clone(int (*fn)(void *), void *child_stack, int flags, void *arg, ..) all
35+
int sigreturn:sigreturn(unsigned long __unused) arm,x86,mips
3536
int rt_sigreturn:rt_sigreturn(unsigned long __unused) all
3637
int rt_tgsigqueueinfo:int rt_tgsigqueueinfo(pid_t tgid, pid_t tid, int sig, siginfo_t *uinfo) all
3738
int restart_syscall:int restart_syscall() all
@@ -54,17 +55,14 @@ int seccomp:seccomp(unsigned int operation, unsigned int flags, void *args) all
5455
# Needed for debugging 32-bit Chrome
5556
int pipe:pipe(int pipefd[2]) arm,x86,mips
5657

57-
# b/34813887
58+
# Needed by breakpad (b/34813887).
5859
int open:open(const char *path, int oflag, ... ) arm,x86,x86_64,mips
5960
int getdents:getdents(unsigned int fd, struct linux_dirent *dirp, unsigned int count) arm,x86,x86_64,mips
6061

61-
# syscalls needed to boot android
62-
int sigreturn:sigreturn(unsigned long __unused) arm,x86,mips
63-
64-
# Needed by sanitizers (b/34606909)
65-
# 5 (__NR_open) and 195 (__NR_stat64) are also required, but they are
66-
# already allowed.
67-
ssize_t readlink:readlink(const char *path, char *buf, size_t bufsiz) arm,x86,x86_64,mips
62+
# Needed by sanitizers (b/34606909, b/136777266).
63+
int open:open(const char*, int, ...) arm,x86,x86_64
64+
int stat64:stat64(const char*, struct stat64*) arm,x86
65+
ssize_t readlink:readlink(const char*, char*, size_t) arm,x86,x86_64
6866

6967
# Probed for and conditionally used by ART.
7068
int membarrier(int cmd, int flags) all

0 commit comments

Comments
 (0)