Prevent AVFS daemon from writing to syslog.
The AVFS daemon may log messages to syslog under certain scenarios.
Writing to syslog may trigger the time, socket, connect, and send system
calls, which are currently disabled by the seccomp filters policy file.
This CL sets up AVFS in a way that it logs messages to a file instead of
syslog, which prevents the socket, connect, send system calls from being
called. Only the time system call is needed and thus enabled in the policy
file.
BUG=chromium-os:24407
TEST=Tested the following:
1. Build cros-disks for x86-generic, amd64-generic, and arm-generic.
2. Run cros-disks unit tests.
3. Run the following autotest tests on a Cr48:
- platform_CrosDisksDBus
- platform_CrosDisksArchive
- platform_CrosDisksFilesystem
4. Manually test opening the ZIP file attached to issue 24407.
Change-Id: Ic490489ef8f2cfd9a2696229ce5593632c0bf145
Reviewed-on: https://gerrit.chromium.org/gerrit/13236
Reviewed-by: Toni Barzic <tbarzic@chromium.org>
Tested-by: Ben Chan <benchan@chromium.org>
Commit-Ready: Ben Chan <benchan@chromium.org>
2 files changed
