StarMirror/sandboxed-api
1
0
Fork 0
mirror of https://github.com/google/sandboxed-api.git synced 2024-03-22 13:11:30 +08:00
Code Issues Projects Releases Wiki Activity

On new process, check for the clone3 syscall.

Browse Source 
PiperOrigin-RevId: 499918752
Change-Id: I7279e76593976c224a15be901834bf6225aebe85
This commit is contained in:
Sandboxed API Team 2023-01-05 10:01:32 -08:00 committed by Copybara-Service
parent 90ee0a7464
commit 756176f206
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sandboxed_api/sandbox2/monitor.cc
View File

@ -1001,6 +1001,9 @@ void Monitor::EventPtraceNewProcess(pid_t pid, int event_msg) {
if (index != syscalls_in_progress_.end()) { if (index != syscalls_in_progress_.end()) {
auto syscall_nr = index->second.nr(); auto syscall_nr = index->second.nr();
bool creating_new_process = syscall_nr == __NR_clone; bool creating_new_process = syscall_nr == __NR_clone;
#ifdef __NR_clone3
creating_new_process = creating_new_process || syscall_nr == __NR_clone3;
#endif
#ifdef __NR_fork #ifdef __NR_fork
creating_new_process = creating_new_process || syscall_nr == __NR_fork; creating_new_process = creating_new_process || syscall_nr == __NR_fork;
#endif #endif