| commit | 70aac1583d7b5370350b249dacdddfa69a972824 | [log] [tgz] |
|---|---|---|
| author | Marco Nelissen <marcone@google.com> | Tue Dec 13 14:44:45 2016 -0800 |
| committer | Marco Nelissen <marcone@google.com> | Tue Dec 13 14:46:28 2016 -0800 |
| tree | e3a22b1994dbc4fa93243269d80d2081a396e8b4 | |
| parent | 4278ba02628d915b52d59dcf5477880cf99f39cd [diff] |
Add missing syscalls to mediaextractor arm64 seccomp filter Two missing calls were preventing debuggerd from catching crashes in mediaextractor Test: triggered crash and verified debuggerd catches it Change-Id: I3306207bff9af1fd63ad66761bc650d6f5147d98
diff --git a/services/mediaextractor/minijail/seccomp_policy/mediaextractor-seccomp-arm64.policy b/services/mediaextractor/minijail/seccomp_policy/mediaextractor-seccomp-arm64.policy index ae6ac05..7e7b858 100644 --- a/services/mediaextractor/minijail/seccomp_policy/mediaextractor-seccomp-arm64.policy +++ b/services/mediaextractor/minijail/seccomp_policy/mediaextractor-seccomp-arm64.policy
@@ -28,6 +28,8 @@ getrlimit: 1 # for attaching to debuggerd on process crash +tgkill: 1 +rt_sigprocmask: 1 rt_sigaction: 1 # socket: arg0 == AF_LOCAL socket: arg0 == 1