Commit 7844944f authored by Robert Sesek's avatar Robert Sesek

[Android] Allow __NR_process_vm_readv under Seccomp.

Bug: 766245
Change-Id: Ic494f526c1b8d15483ca7e9a97d9f044f276c26d
Reviewed-on: https://chromium-review.googlesource.com/671556Reviewed-by: default avatarRichard Coles <torne@chromium.org>
Commit-Queue: Robert Sesek <rsesek@chromium.org>
Cr-Commit-Position: refs/heads/master@{#502714}
parent 7cd6c29f
...@@ -149,6 +149,13 @@ ResultExpr BaselinePolicyAndroid::EvaluateSyscall(int sysno) const { ...@@ -149,6 +149,13 @@ ResultExpr BaselinePolicyAndroid::EvaluateSyscall(int sysno) const {
.Else(Error(EPERM)); .Else(Error(EPERM));
} }
// https://crbug.com/766245
if (sysno == __NR_process_vm_readv) {
const Arg<pid_t> pid(0);
return If(pid == policy_pid(), Allow())
.Else(Error(EPERM));
}
// https://crbug.com/655299 // https://crbug.com/655299
if (sysno == __NR_clock_getres) { if (sysno == __NR_clock_getres) {
return RestrictClockID(); return RestrictClockID();
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment