commit | 7307c2309cf58966010929a9588ab5696c5485cc | [log] [tgz] |
---|---|---|
author | Allen Webb <allenwebb@google.com> | Tue Oct 11 13:05:18 2022 |
committer | Chromeos LUCI <chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com> | Thu Oct 13 13:11:46 2022 |
tree | 20d0773f5daa323538495308226c01e9490fa54b | |
parent | 886fb0037916266e9dbd448d4c6ec01775d66bd3 [diff] |
seccomp: sisupdate.update.policy: Limit mmap and mprotect arg2. We do not want to allow writable executable memory. BUG=b:172212144 TEST=manual check Change-Id: If07efd9bd98b6e38ecf386b7bb5a981aa540bcf6 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/touch_updater/+/3945859 Commit-Queue: Allen Webb <allenwebb@google.com> Tested-by: Sean O'Brien <seobrien@chromium.org> Tested-by: Allen Webb <allenwebb@google.com> Reviewed-by: Sean O'Brien <seobrien@chromium.org>