forked from kiss-community/repo
30 lines
1.0 KiB
Diff
30 lines
1.0 KiB
Diff
|
diff --git a/security/sandbox/linux/SandboxFilter.cpp b/security/sandbox/linux/SandboxFilter.cpp
|
||
|
|
index dffefac..19cc432 100644
|
||
|
|
--- a/security/sandbox/linux/SandboxFilter.cpp
|
||
|
|
+++ b/security/sandbox/linux/SandboxFilter.cpp
|
||
|
|
@@ -1595,6 +1595,11 @@ class ContentSandboxPolicy : public SandboxPolicyCommon {
|
||
|
|
case __NR_clone3:
|
||
|
|
return Error(ENOSYS);
|
||
|
|
|
||
|
|
+# ifdef __NR_fork
|
||
|
|
+ case __NR_fork:
|
||
|
|
+ return Error(ENOSYS);
|
||
|
|
+# endif
|
||
|
|
+
|
||
|
|
# ifdef __NR_fadvise64
|
||
|
|
case __NR_fadvise64:
|
||
|
|
return Allow();
|
||
|
|
@@ -1736,10 +1741,10 @@ class GMPSandboxPolicy : public SandboxPolicyCommon {
|
||
|
|
return Allow();
|
||
|
|
case __NR_sched_get_priority_min:
|
||
|
|
case __NR_sched_get_priority_max:
|
||
|
|
+ case __NR_sched_setscheduler:
|
||
|
|
return Allow();
|
||
|
|
case __NR_sched_getparam:
|
||
|
|
- case __NR_sched_getscheduler:
|
||
|
|
- case __NR_sched_setscheduler: {
|
||
|
|
+ case __NR_sched_getscheduler: {
|
||
|
|
Arg<pid_t> pid(0);
|
||
|
|
return If(pid == 0, Allow()).Else(Trap(SchedTrap, nullptr));
|
||
|
|
}
|