| commit | bcf4a5dcad757c381bbe460a92fadf464a26bdef | [log] [tgz] |
|---|---|---|
| author | Shelley Chen <shchen@google.com> | Wed May 15 21:34:55 2019 |
| committer | chrome-bot <chrome-bot@chromium.org> | Sat May 18 01:37:50 2019 |
| tree | cf93c42a18304a5b366640c5a0567634bbcdf654 | |
| parent | f2fd248015aa8456596017cd718138332a6fcb8b [diff] |
seccomp: Add getgroups to all mosys seccomp filter BUG=b:132270270 BRANCH=None TEST=Added group to seccomp filter on DUT and syscall core dumps disappeared. Change-Id: Ie72717c00a921d2b6081342a8f2e47bcd9aa9080 Signed-off-by: Shelley Chen <shchen@google.com> Reviewed-on: https://chromium-review.googlesource.com/1614320 Commit-Ready: Shelley Chen <shchen@chromium.org> Tested-by: Shelley Chen <shchen@chromium.org> Reviewed-by: Paul Fagerburg <pfagerburg@chromium.org> Reviewed-by: Furquan Shaikh <furquan@chromium.org> Reviewed-by: Rajat Jain <rajatja@google.com>
diff --git a/seccomp/mosys-seccomp-amd64.policy b/seccomp/mosys-seccomp-amd64.policy index 62093ae..2f92084 100644 --- a/seccomp/mosys-seccomp-amd64.policy +++ b/seccomp/mosys-seccomp-amd64.policy
@@ -11,6 +11,7 @@ flock: 1 fstat: 1 ftruncate: 1 +getgroups: 1 getpid: 1 ioctl: 1 iopl: 1
diff --git a/seccomp/mosys-seccomp-arm.policy b/seccomp/mosys-seccomp-arm.policy index aecf161..d1f7aaa 100644 --- a/seccomp/mosys-seccomp-arm.policy +++ b/seccomp/mosys-seccomp-arm.policy
@@ -19,6 +19,7 @@ flock: 1 pipe2: 1 clone: 1 +getgroups: 1 getpid: 1 fcntl64: 1 wait4: 1
diff --git a/seccomp/mosys-seccomp-arm64.policy b/seccomp/mosys-seccomp-arm64.policy index d76ef30..c358b5f 100644 --- a/seccomp/mosys-seccomp-arm64.policy +++ b/seccomp/mosys-seccomp-arm64.policy
@@ -20,6 +20,7 @@ flock: 1 pipe2: 1 clone: 1 +getgroups: 1 getpid: 1 fcntl: 1 wait4: 1