| commit | e446c8e0ab808f567cf6ba1f35fa98b3cf7cb629 | [log] [tgz] |
|---|---|---|
| author | Jeff Vander Stoep <jeffv@google.com> | Wed Mar 30 15:23:20 2016 -0700 |
| committer | Jeffrey Vander Stoep <jeffv@google.com> | Wed Mar 30 22:25:39 2016 +0000 |
| tree | 537d5fc386c01f944bc9b40e9229e52b771e996e | |
| parent | 8e90fecfe6c7d1005e51e0a0d68b09548856224d [diff] |
minijail: allow a syscalls to permit logging Allowed geteuid32, getgid32, getegid32 and getgroups32. Bug: 27925431 Change-Id: I8f4cd86f6a4cee12d3654b4a4ad6e5bcb12049eb
diff --git a/services/mediaextractor/minijail/seccomp_policy/mediaextractor-seccomp-x86.policy b/services/mediaextractor/minijail/seccomp_policy/mediaextractor-seccomp-x86.policy index 516ca60..67976ff 100644 --- a/services/mediaextractor/minijail/seccomp_policy/mediaextractor-seccomp-x86.policy +++ b/services/mediaextractor/minijail/seccomp_policy/mediaextractor-seccomp-x86.policy
@@ -31,6 +31,10 @@ sched_setscheduler: 1 ugetrlimit: 1 getrlimit: 1 +geteuid32: 1 +getgid32: 1 +getegid32: 1 +getgroups32: 1 # for attaching to debuggerd on process crash socketcall: 1