commit f2c2c58220f18192027cb3acab63772144f33898
author Paul Lawrence <paullawrence@google.com> Tue Jan 31 22:56:45 2017 +0000
committer android-build-merger <android-build-merger@google.com> Tue Jan 31 22:56:45 2017 +0000
tree a6887e197cfd445c3ba003940afb3fdcdbe9042e
parent bdf6e62b882e393840be76dbb144dfc711207dcc
parent 0e500f23e184877717959cb922a89eb95d6be410

Merge "Expand seccomp whitelist" am: 301e7e2cdb am: 329417241e
am: 32ad0ad150

Change-Id: Ifcf1c09624d622abce2f9c69966da25ce8bcec09

init/seccomp.cpp

diff --git a/init/seccomp.cpp b/init/seccomp.cpp
index 6c85217..a98835d 100644
--- a/init/seccomp.cpp
+++ b/init/seccomp.cpp
@@ -223,6 +223,14 @@
     AllowSyscall(f, 33);  // __NR_access
     AllowSyscall(f, 195); // __NR_stat64
 
+    // b/34813887
+    AllowSyscall(f, 5);   // __NR_open
+    AllowSyscall(f, 141); // __NR_getdents
+    AllowSyscall(f, 217); // __NR_getdents64
+
+    // b/34719286
+    AllowSyscall(f, 351); // __NR_eventfd
+
     // arm32-on-arm64 only filter - autogenerated from bionic syscall usage
     for (size_t i = 0; i < arm_filter_size; ++i)
         f.push_back(arm_filter[i]);