mirror of
https://github.com/google/sandboxed-api.git
synced 2024-03-22 13:11:30 +08:00
Allow restartable sequences' mmaps to name their VMAs.
PiperOrigin-RevId: 596593499 Change-Id: Ice231b633758667947ec31da5c22f146847e6c6f
This commit is contained in:
parent
fc610b7c7a
commit
a56660f542
|
@ -773,6 +773,7 @@ PolicyBuilder& PolicyBuilder::AllowRestartableSequences(
|
||||||
ARG_32(0),
|
ARG_32(0),
|
||||||
JEQ32(SIG_SETMASK, ALLOW),
|
JEQ32(SIG_SETMASK, ALLOW),
|
||||||
});
|
});
|
||||||
|
AllowPrctlSetVma();
|
||||||
if (cpu_fence_mode == kAllowSlowFences) {
|
if (cpu_fence_mode == kAllowSlowFences) {
|
||||||
AllowSyscall(__NR_sched_getaffinity);
|
AllowSyscall(__NR_sched_getaffinity);
|
||||||
AllowSyscall(__NR_sched_setaffinity);
|
AllowSyscall(__NR_sched_setaffinity);
|
||||||
|
|
Loading…
Reference in New Issue
Block a user