Commit e4654f76 authored by jln's avatar jln Committed by Commit bot

Linux sandbox: allow sigaltstack in Android baseline policy.

Allow sigaltstack on Android as it is needed for thread creation.
On AARCH64, we now restrict setpriority() like on any architecture.

BUG=398611

Review URL: https://codereview.chromium.org/568533002

Cr-Commit-Position: refs/heads/master@{#294486}
parent 79b36567
......@@ -120,10 +120,9 @@ ResultExpr EvaluateSyscallImpl(int fs_denied_errno,
return Allow();
}
#if defined(__aarch64__)
// These are needed for thread creation.
// TODO(leecam): Check jln's fix for this and remove these 'allows'.
if (sysno == __NR_sigaltstack || sysno == __NR_setpriority)
#if defined(OS_ANDROID)
// Needed for thread creation.
if (sysno == __NR_sigaltstack)
return Allow();
#endif
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment