diff options
| author | evan@chromium.org <evan@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-02-03 23:15:05 +0000 |
|---|---|---|
| committer | evan@chromium.org <evan@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-02-03 23:15:05 +0000 |
| commit | 49a518aabe67f9366bc23d0142493cb6508d662d (patch) | |
| tree | 04d877dd02c7de4f461a1a8bd99276b40e628e7d /sandbox | |
| parent | 2aefa2dacd234b8f3237fb66b723b43ae9d4703a (diff) | |
| download | chromium_src-49a518aabe67f9366bc23d0142493cb6508d662d.zip chromium_src-49a518aabe67f9366bc23d0142493cb6508d662d.tar.gz chromium_src-49a518aabe67f9366bc23d0142493cb6508d662d.tar.bz2 | |
seccomp: allow dup/dup2
This is needed for opening the renderer<->plugin channel.
TEST=flash works in seccomp mode
Review URL: http://codereview.chromium.org/563024
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@38037 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'sandbox')
| -rw-r--r-- | sandbox/linux/seccomp/syscall_table.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/sandbox/linux/seccomp/syscall_table.c b/sandbox/linux/seccomp/syscall_table.c index 588a1b5..b306b63 100644 --- a/sandbox/linux/seccomp/syscall_table.c +++ b/sandbox/linux/seccomp/syscall_table.c @@ -37,6 +37,8 @@ const struct SyscallTable syscallTable[] __attribute__(( [ __NR_clock_gettime ] = { UNRESTRICTED_SYSCALL, 0 }, [ __NR_clone ] = { (void*)&sandbox_clone, process_clone }, [ __NR_close ] = { UNRESTRICTED_SYSCALL, 0 }, + [ __NR_dup ] = { UNRESTRICTED_SYSCALL, 0 }, + [ __NR_dup2 ] = { UNRESTRICTED_SYSCALL, 0 }, [ __NR_epoll_create ] = { UNRESTRICTED_SYSCALL, 0 }, [ __NR_epoll_ctl ] = { UNRESTRICTED_SYSCALL, 0 }, [ __NR_epoll_wait ] = { UNRESTRICTED_SYSCALL, 0 }, |