Allow sigaltstack

`absl::GetStackTrace` on Aarch64 since
bb7bbb12c7 will call sigaltstack.

PiperOrigin-RevId: 581914257
Change-Id: I316bdd64d1cef8a6327838681bda0067a0dc50fc
This commit is contained in:
Wiktor Garbacz 2023-11-13 04:21:53 -08:00 committed by Copybara-Service
parent bc3c0ec17a
commit 15fb5b9608

View File

@ -50,6 +50,7 @@ std::unique_ptr<sandbox2::Policy> GetPolicy(absl::string_view sandboxee_path) {
.AllowSyscall(__NR_lseek) .AllowSyscall(__NR_lseek)
.AllowSyscall(__NR_munmap) .AllowSyscall(__NR_munmap)
.AllowSyscall(__NR_getpid) .AllowSyscall(__NR_getpid)
.AllowSyscall(__NR_sigaltstack)
.AllowTcMalloc() .AllowTcMalloc()
.AddLibrariesForBinary(sandboxee_path); .AddLibrariesForBinary(sandboxee_path);
if (absl::GetFlag(FLAGS_connect_with_handler)) { if (absl::GetFlag(FLAGS_connect_with_handler)) {