| commit | fa046a1c9e24b1c9522d8606b9663c19dfa11640 | [log] [tgz] |
|---|---|---|
| author | Victor Hsieh <victorhsieh@google.com> | Wed Mar 28 16:26:28 2018 -0700 |
| committer | Victor Hsieh <victorhsieh@google.com> | Wed Mar 28 16:26:28 2018 -0700 |
| tree | 70e1352dc7e32b570673dfd944d0cff054a99c1d | |
| parent | 18aa649b8fe54ac117bb26a0dbed3d0705034fa4 [diff] |
Fix seccomp filter set up in zygote This needs to land with extra syscalls whitelisted, including capset and setresuid. These privileged syscalls are used in the setup after the filter is initialized. Test: system starts, different apps run Bug: 63944145 Bug: 76461821 Change-Id: I49e6b292805f35baffb3530461c8741e75aceb32