OSDN Git Service

Fix seccomp filter set up in zygote
authorVictor Hsieh <victorhsieh@google.com>
Wed, 28 Mar 2018 23:26:28 +0000 (16:26 -0700)
committerVictor Hsieh <victorhsieh@google.com>
Wed, 28 Mar 2018 23:26:28 +0000 (16:26 -0700)
commitfa046a1c9e24b1c9522d8606b9663c19dfa11640
tree70e1352dc7e32b570673dfd944d0cff054a99c1d
parent18aa649b8fe54ac117bb26a0dbed3d0705034fa4
Fix seccomp filter set up in zygote

This needs to land with extra syscalls whitelisted, including capset and
setresuid.  These privileged syscalls are used in the setup after the
filter is initialized.

Test: system starts, different apps run
Bug: 63944145
Bug: 76461821
Change-Id: I49e6b292805f35baffb3530461c8741e75aceb32
core/jni/com_android_internal_os_Zygote.cpp