Add prlimit64 to AllowLogForwarding

PiperOrigin-RevId: 414385430
Change-Id: I4e70d25f886f1ef65fab1b62c67e80eb45407bc7
This commit is contained in:
Wiktor Garbacz 2021-12-06 02:18:22 -08:00 committed by Copybara-Service
parent e61a84979a
commit 2a67805a13

View File

@ -559,6 +559,8 @@ PolicyBuilder& PolicyBuilder::AllowLogForwarding() {
ARG_32(0),
JEQ32(SIG_BLOCK, ALLOW),
});
AllowSyscall(__NR_prlimit64);
// For LOG(FATAL)
return AddPolicyOnSyscall(__NR_kill,
[](bpf_labels& labels) -> std::vector<sock_filter> {