commit 32ad0ad1502b8eb28e38eae861b1fe82af115826
author Paul Lawrence <paullawrence@google.com> Tue Jan 31 22:51:51 2017 +0000
committer android-build-merger <android-build-merger@google.com> Tue Jan 31 22:51:51 2017 +0000
tree 8ce0fdd612531e79bb81094fdbfec10ebb75a4ab
parent 74aa9112774e1d2b3fa279f2ce4490c9728738a0
parent 329417241ebd8a99b9524041efb105100a780c08

Merge "Expand seccomp whitelist" am: 301e7e2cdb
am: 329417241e

Change-Id: I19023b91ef48560d20b2678e2b4789f983cc409c

init/seccomp.cpp

diff --git a/init/seccomp.cpp b/init/seccomp.cpp
index 6c85217..a98835d 100644
--- a/init/seccomp.cpp
+++ b/init/seccomp.cpp
@@ -223,6 +223,14 @@
     AllowSyscall(f, 33);  // __NR_access
     AllowSyscall(f, 195); // __NR_stat64
 
+    // b/34813887
+    AllowSyscall(f, 5);   // __NR_open
+    AllowSyscall(f, 141); // __NR_getdents
+    AllowSyscall(f, 217); // __NR_getdents64
+
+    // b/34719286
+    AllowSyscall(f, 351); // __NR_eventfd
+
     // arm32-on-arm64 only filter - autogenerated from bionic syscall usage
     for (size_t i = 0; i < arm_filter_size; ++i)
         f.push_back(arm_filter[i]);