Merge "Expand seccomp whitelist"

2017-01-31 22:44:42 +00:00 · 2017-01-31 22:44:42 +00:00 · 301e7e2cdb
parent 26a714a0ab ae3f906093
commit 301e7e2cdb
1 changed files with 8 additions and 0 deletions
--- a/init/seccomp.cpp
+++ b/init/seccomp.cpp
@ -223,6 +223,14 @@ bool set_seccomp_filter() {
    AllowSyscall(f, 33);  // __NR_access
    AllowSyscall(f, 195); // __NR_stat64

+    // b/34813887
+    AllowSyscall(f, 5);   // __NR_open
+    AllowSyscall(f, 141); // __NR_getdents
+    AllowSyscall(f, 217); // __NR_getdents64
+
+    // b/34719286
+    AllowSyscall(f, 351); // __NR_eventfd
+
    // arm32-on-arm64 only filter - autogenerated from bionic syscall usage
    for (size_t i = 0; i < arm_filter_size; ++i)
        f.push_back(arm_filter[i]);