commit eac1c71ce48d38cfb3a4f3a3cd53144de4cd03d6
author Treehugger Robot <treehugger-gerrit@google.com> Tue Jul 24 17:57:00 2018 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue Jul 24 17:57:00 2018 +0000
tree 99083ed1720def8d61ac1038b4eb10c769a62f1f
parent 8de59b93bd30a8f5e17b6bbb0b9318768d19786a
parent 21d87dde45dc96346ab8b31b3429e181014ac835

Merge "Remove misleading comment in sample dumpstate impl"

configstore/1.0/default/seccomp_policy/configstore@1.0-arm64.policy

diff --git a/configstore/1.0/default/seccomp_policy/configstore@1.0-arm64.policy b/configstore/1.0/default/seccomp_policy/configstore@1.0-arm64.policy
index 62d7e1d..e027aa1 100644
--- a/configstore/1.0/default/seccomp_policy/configstore@1.0-arm64.policy
+++ b/configstore/1.0/default/seccomp_policy/configstore@1.0-arm64.policy
@@ -17,7 +17,9 @@
 ioctl: arg1 == 0xc0306201
 # prctl: arg0 == PR_SET_NAME || arg0 == PR_SET_VMA || arg0 == PR_SET_TIMERSLACK
 # || arg0 == PR_GET_NO_NEW_PRIVS # used by crash_dump
-prctl: arg0 == 15 || arg0 == 0x53564d41 || arg0 == 29 || arg0 == 39
+# prctl: arg0 == 15 || arg0 == 0x53564d41 || arg0 == 29 || arg0 == 39
+# TODO(b/68162846) reduce scope of prctl() based on arguments
+prctl: 1
 openat: 1
 mmap: 1
 mprotect: 1