StarMirror/sandboxed-api
1
0
Fork 0
mirror of https://github.com/google/sandboxed-api.git synced 2024-03-22 13:11:30 +08:00
Code Issues Projects Releases Wiki Activity

Allow TCMalloc to access the rseq syscall.

Browse Source 
PiperOrigin-RevId: 243441655
Change-Id: I82918459c20f164b56cc0c5b621b004315a011ec
This commit is contained in:
Chris Kennelly 2019-04-13 13:45:06 -07:00 committed by Copybara-Service
parent e2eb0597cb
commit d90b2c6328
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sandboxed_api/sandbox2/policybuilder.cc
View File

@ -114,6 +114,9 @@ PolicyBuilder& PolicyBuilder::AllowTcMalloc() {
AllowSyscalls({__NR_munmap, __NR_nanosleep, __NR_brk, __NR_mincore}); AllowSyscalls({__NR_munmap, __NR_nanosleep, __NR_brk, __NR_mincore});
AllowFutexOp(FUTEX_WAKE); AllowFutexOp(FUTEX_WAKE);
AllowLimitedMadvise(); AllowLimitedMadvise();
#ifdef __NR_rseq
AllowSyscall(__NR_rseq);
#endif
AddPolicyOnSyscall(__NR_mprotect, { AddPolicyOnSyscall(__NR_mprotect, {
ARG_32(2), ARG_32(2),