diff --git a/build/patches/Remove-mremap-from-seccomp-baseline-policy.patch b/build/patches/Remove-mremap-from-seccomp-baseline-policy.patch new file mode 100644 index 00000000..d486fe71 --- /dev/null +++ b/build/patches/Remove-mremap-from-seccomp-baseline-policy.patch @@ -0,0 +1,24 @@ +From: csagan5 <32685696+csagan5@users.noreply.github.com> +Date: Sat, 16 Apr 2022 10:14:28 +0200 +Subject: Remove mremap from seccomp baseline policy + +See also: +* https://bugs.chromium.org/p/chromium/issues/detail?id=1288042 +* https://docs.hexavalent.org/sandboxing/mremap.html +--- + sandbox/linux/seccomp-bpf-helpers/baseline_policy_android.cc | 1 - + 1 file changed, 1 deletion(-) + +diff --git a/sandbox/linux/seccomp-bpf-helpers/baseline_policy_android.cc b/sandbox/linux/seccomp-bpf-helpers/baseline_policy_android.cc +--- a/sandbox/linux/seccomp-bpf-helpers/baseline_policy_android.cc ++++ b/sandbox/linux/seccomp-bpf-helpers/baseline_policy_android.cc +@@ -98,7 +98,6 @@ ResultExpr BaselinePolicyAndroid::EvaluateSyscall(int sysno) const { + case __NR_getpriority: + case __NR_ioctl: + case __NR_membarrier: // https://crbug.com/966433 +- case __NR_mremap: + #if defined(__i386__) + // Used on pre-N to initialize threads in ART. + case __NR_modify_ldt: +-- +2.25.1