StarMirror/sandboxed-api
1
0
Fork 0
mirror of https://github.com/google/sandboxed-api.git synced 2024-03-22 13:11:30 +08:00
Code Issues Projects Releases Wiki Activity

Add prlimit64 to AllowLogForwarding

Browse Source 
PiperOrigin-RevId: 414385430
Change-Id: I4e70d25f886f1ef65fab1b62c67e80eb45407bc7
This commit is contained in:
Wiktor Garbacz 2021-12-06 02:18:22 -08:00 committed by Copybara-Service
parent e61a84979a
commit 2a67805a13
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sandboxed_api/sandbox2/policybuilder.cc
View File

@ -559,6 +559,8 @@ PolicyBuilder& PolicyBuilder::AllowLogForwarding() {
ARG_32(0), ARG_32(0),
JEQ32(SIG_BLOCK, ALLOW), JEQ32(SIG_BLOCK, ALLOW),
}); });
AllowSyscall(__NR_prlimit64);
// For LOG(FATAL) // For LOG(FATAL)
return AddPolicyOnSyscall(__NR_kill, return AddPolicyOnSyscall(__NR_kill,
[](bpf_labels& labels) -> std::vector<sock_filter> { [](bpf_labels& labels) -> std::vector<sock_filter> {