Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 8de59b93 authored by Jeff Vander Stoep's avatar Jeff Vander Stoep Committed by Steven Moreland
Browse files

configstore: reduce restrictions in prctl() 

Prevent configstore from crash-looping due to:
/vendor/bin/hw/android.hardware.configstore@1.0-service:
libminijail[22988]: blocked syscall: prctl

Bug: 68162846
Bug: 78363521
Test: Launch photos.
Merged-In: I1593ea1e03ec5f688ec7311e586178f2f952fed9
Change-Id: I1593ea1e03ec5f688ec7311e586178f2f952fed9
(cherry picked from commit 41534729)
parent fdcdeb2a

configstore/1.0/default/seccomp_policy/configstore@1.0-arm64.policy

+3 −1
Original line number Diff line number Diff line
@@ -17,7 +17,9 @@ futex: 1 
ioctl: arg1 == 0xc0306201

# prctl: arg0 == PR_SET_NAME || arg0 == PR_SET_VMA || arg0 == PR_SET_TIMERSLACK

# || arg0 == PR_GET_NO_NEW_PRIVS # used by crash_dump

prctl: arg0 == 15 || arg0 == 0x53564d41 || arg0 == 29 || arg0 == 39

# prctl: arg0 == 15 || arg0 == 0x53564d41 || arg0 == 29 || arg0 == 39

# TODO(b/68162846) reduce scope of prctl() based on arguments

prctl: 1

openat: 1

mmap: 1

mprotect: 1