0ct0pu5/bromite
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add temptative patch for mremap removal

Browse source
This commit is contained in:
csagan5 2022-04-16 16:59:48 +02:00 • committed by Yifeng Wu
parent 64d3d722c7
commit 5d8230b98a
1 changed files with 24 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
build/patches/Remove-mremap-from-seccomp-baseline-policy.patch Normal file
View file

@ -0,0 +1,24 @@
From: csagan5 <32685696+csagan5@users.noreply.github.com>
Date: Sat, 16 Apr 2022 10:14:28 +0200
Subject: Remove mremap from seccomp baseline policy
See also:
* https://bugs.chromium.org/p/chromium/issues/detail?id=1288042
* https://docs.hexavalent.org/sandboxing/mremap.html
---
sandbox/linux/seccomp-bpf-helpers/baseline_policy_android.cc | 1 -
1 file changed, 1 deletion(-)
diff --git a/sandbox/linux/seccomp-bpf-helpers/baseline_policy_android.cc b/sandbox/linux/seccomp-bpf-helpers/baseline_policy_android.cc
--- a/sandbox/linux/seccomp-bpf-helpers/baseline_policy_android.cc
+++ b/sandbox/linux/seccomp-bpf-helpers/baseline_policy_android.cc
@@ -98,7 +98,6 @@ ResultExpr BaselinePolicyAndroid::EvaluateSyscall(int sysno) const {
case __NR_getpriority:
case __NR_ioctl:
case __NR_membarrier: // https://crbug.com/966433
- case __NR_mremap:
#if defined(__i386__)
// Used on pre-N to initialize threads in ART.
case __NR_modify_ldt:
--
2.25.1