Add AllowAccess to SAPI's default policy

The syscalls are fairly common and low risk. PiperOrigin-RevId: 603312020 Change-Id: Id06bddc4e7fcc879cad567361ae5b0bad9533142
2024-02-01 02:51:09 -08:00 · 2024-02-01 02:51:09 -08:00 · 29a3b8cd39
parent b9c84a1f75
commit 29a3b8cd39
1 changed files with 1 additions and 0 deletions
--- a/sandboxed_api/sandbox.cc
+++ b/sandboxed_api/sandbox.cc
@ -76,6 +76,7 @@ void InitDefaultPolicyBuilder(sandbox2::PolicyBuilder* builder) {
      .AllowGetPIDs()
      .AllowSleep()
      .AllowReadlink()
+      .AllowAccess()
      .AllowSyscalls({
          __NR_recvmsg,
          __NR_sendmsg,