Files
cromite/build/patches/Remove-mremap-from-seccomp-baseline-policy.patch
2022-05-28 12:06:53 +02:00

25 lines
986 B
Diff

From: csagan5 <32685696+csagan5@users.noreply.github.com>
Date: Sat, 16 Apr 2022 10:14:28 +0200
Subject: Remove mremap from seccomp baseline policy
See also:
* https://bugs.chromium.org/p/chromium/issues/detail?id=1288042
* https://docs.hexavalent.org/sandboxing/mremap.html
---
sandbox/linux/seccomp-bpf-helpers/baseline_policy_android.cc | 1 -
1 file changed, 1 deletion(-)
diff --git a/sandbox/linux/seccomp-bpf-helpers/baseline_policy_android.cc b/sandbox/linux/seccomp-bpf-helpers/baseline_policy_android.cc
--- a/sandbox/linux/seccomp-bpf-helpers/baseline_policy_android.cc
+++ b/sandbox/linux/seccomp-bpf-helpers/baseline_policy_android.cc
@@ -160,7 +160,6 @@ ResultExpr BaselinePolicyAndroid::EvaluateSyscall(int sysno) const {
case __NR_getdents64:
case __NR_getpriority:
case __NR_membarrier: // https://crbug.com/966433
- case __NR_mremap:
#if defined(__i386__)
// Used on pre-N to initialize threads in ART.
case __NR_modify_ldt:
--
2.25.1