Commit 8a6f6dfe authored by jln@chromium.org's avatar jln@chromium.org

Linux sandbox: allow *kill in the GPU process.

BUG=367986
R=mdempsky@chromium.org
TBR=jorgelo

Review URL: https://codereview.chromium.org/252323005

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@267025 0039d316-1c4b-4281-b951-d872f2087c98
parent d263d5b8
......@@ -185,6 +185,10 @@ ErrorCode GpuProcessPolicy::EvaluateSyscall(SandboxBPF* sandbox,
DCHECK(broker_process_);
return sandbox->Trap(GpuSIGSYS_Handler, broker_process_);
default:
// Allow *kill from the GPU process temporarily until fork()
// is denied here.
if (SyscallSets::IsKill(sysno))
return ErrorCode(ErrorCode::ERR_ALLOWED);
if (SyscallSets::IsEventFd(sysno))
return ErrorCode(ErrorCode::ERR_ALLOWED);
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment