commit 3d9fc696a5a511bc49a41cba936b8b200481982f
author Paul Lawrence <paullawrence@google.com> Tue Jan 24 10:44:55 2017 -0800
committer Paul Lawrence <paullawrence@google.com> Tue Jan 24 11:07:04 2017 -0800
tree 9fb8aac5c5f560eea860e1451c46b0827de53af5
parent 7844b4c5dbd0be9ea4212a523da2dd6a4804032c

Use trap not kill in seccomp filter

Bug: 34647665
Test: Make sure boots, check that causing a seccomp failure creates a
      crash dump

Change-Id: I5ab2fe3e8322a3c38318c97d343834baa874af8d

libc/seccomp/arm64_policy.c

diff --git a/libc/seccomp/arm64_policy.c b/libc/seccomp/arm64_policy.c
index d5a87d6..6a8bda0 100644
--- a/libc/seccomp/arm64_policy.c
+++ b/libc/seccomp/arm64_policy.c
@@ -41,7 +41,7 @@
 BPF_JUMP(BPF_JMP|BPF_JGE|BPF_K, 268, 1, 0),
 BPF_JUMP(BPF_JMP|BPF_JGE|BPF_K, 267, 1, 2), //clock_adjtime
 BPF_JUMP(BPF_JMP|BPF_JGE|BPF_K, 272, 0, 1), //setns|sendmmsg|process_vm_readv|process_vm_writev
-BPF_STMT(BPF_RET|BPF_K, SECCOMP_RET_KILL),
+BPF_STMT(BPF_RET|BPF_K, SECCOMP_RET_TRAP),
 BPF_STMT(BPF_RET|BPF_K, SECCOMP_RET_ALLOW),
 };