StarMirror/sandboxed-api
1
0
Fork 0
mirror of https://github.com/google/sandboxed-api.git synced 2024-03-22 13:11:30 +08:00
Code Issues Projects Releases Wiki Activity

Add rt_sigprocmask to AllowLogForwarding

Browse Source 
PiperOrigin-RevId: 376142747
Change-Id: I6470a6eea8a4e85b0921de6dc332097a6c9440a4
This commit is contained in:
Sandboxed API Team 2021-05-27 04:40:02 -07:00 committed by Copybara-Service
parent d73f80cfa5
commit aa568597b0
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
sandboxed_api/sandbox2/policybuilder.cc
View File

@ -522,6 +522,11 @@ PolicyBuilder& PolicyBuilder::AllowLogForwarding() {
// From comms // From comms
__NR_gettid, __NR_close}); __NR_gettid, __NR_close});
// For generating stacktraces in logging (e.g. `LOG(FATAL)`)
AddPolicyOnSyscall(__NR_rt_sigprocmask, {
ARG_32(0),
JEQ32(SIG_BLOCK, ALLOW),
});
// For LOG(FATAL) // For LOG(FATAL)
return AddPolicyOnSyscall(__NR_kill, return AddPolicyOnSyscall(__NR_kill,
[](bpf_labels& labels) -> std::vector<sock_filter> { [](bpf_labels& labels) -> std::vector<sock_filter> {