seccomp: Add gettid to all policies
The gettid syscall is similar to getpid, except it returns the
thread id. This syscall is used in GWP-ASan support for various
allocators like scudo and Partition Alloc. If we want GWP-ASan
enabled system-wide, gettid must be available for processes
which use the system allocator (currently GNU Allocator).
In particular, we found elani2chid to complain about gettid
seccomp violations. We've added the gettid to everything under
touch updater even so to future proof.
BUG=b:248085566
TEST=CQ
Change-Id: I51149b6db1ab1c865f4b2a0352b577182189e4fb
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/touch_updater/+/4032389
Reviewed-by: Henry Barnor <hbarnor@chromium.org>
Commit-Queue: Jordan Abrahams-Whitehead <ajordanr@google.com>
Tested-by: Jordan Abrahams-Whitehead <ajordanr@google.com>
51 files changed
