Add rt_sigprocmask to AllowLogForwarding

PiperOrigin-RevId: 376142747
Change-Id: I6470a6eea8a4e85b0921de6dc332097a6c9440a4
This commit is contained in:
Sandboxed API Team 2021-05-27 04:40:02 -07:00 committed by Copybara-Service
parent d73f80cfa5
commit aa568597b0

View File

@ -522,6 +522,11 @@ PolicyBuilder& PolicyBuilder::AllowLogForwarding() {
// From comms // From comms
__NR_gettid, __NR_close}); __NR_gettid, __NR_close});
// For generating stacktraces in logging (e.g. `LOG(FATAL)`)
AddPolicyOnSyscall(__NR_rt_sigprocmask, {
ARG_32(0),
JEQ32(SIG_BLOCK, ALLOW),
});
// For LOG(FATAL) // For LOG(FATAL)
return AddPolicyOnSyscall(__NR_kill, return AddPolicyOnSyscall(__NR_kill,
[](bpf_labels& labels) -> std::vector<sock_filter> { [](bpf_labels& labels) -> std::vector<sock_filter> {