Commit e4654f76 authored by jln's avatar jln Committed by Commit bot

Linux sandbox: allow sigaltstack in Android baseline policy.

Allow sigaltstack on Android as it is needed for thread creation.
On AARCH64, we now restrict setpriority() like on any architecture.

BUG=398611

Review URL: https://codereview.chromium.org/568533002

Cr-Commit-Position: refs/heads/master@{#294486}
parent 79b36567
...@@ -120,10 +120,9 @@ ResultExpr EvaluateSyscallImpl(int fs_denied_errno, ...@@ -120,10 +120,9 @@ ResultExpr EvaluateSyscallImpl(int fs_denied_errno,
return Allow(); return Allow();
} }
#if defined(__aarch64__) #if defined(OS_ANDROID)
// These are needed for thread creation. // Needed for thread creation.
// TODO(leecam): Check jln's fix for this and remove these 'allows'. if (sysno == __NR_sigaltstack)
if (sysno == __NR_sigaltstack || sysno == __NR_setpriority)
return Allow(); return Allow();
#endif #endif
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment