2022-12-12 19:01:56 +00:00
|
|
|
diff --git a/security/sandbox/linux/SandboxFilter.cpp b/security/sandbox/linux/SandboxFilter.cpp
|
2024-05-13 18:17:21 +00:00
|
|
|
index a3b70e7..e5e604f 100644
|
2022-12-12 19:01:56 +00:00
|
|
|
--- a/security/sandbox/linux/SandboxFilter.cpp
|
|
|
|
+++ b/security/sandbox/linux/SandboxFilter.cpp
|
|
|
|
@@ -1595,6 +1595,11 @@ class ContentSandboxPolicy : public SandboxPolicyCommon {
|
2024-05-13 18:17:21 +00:00
|
|
|
case __NR_clone:
|
|
|
|
return ClonePolicy(Error(EPERM));
|
2022-12-12 19:01:56 +00:00
|
|
|
|
|
|
|
+# ifdef __NR_fork
|
|
|
|
+ case __NR_fork:
|
|
|
|
+ return Error(ENOSYS);
|
|
|
|
+# endif
|
|
|
|
+
|
|
|
|
# ifdef __NR_fadvise64
|
|
|
|
case __NR_fadvise64:
|
|
|
|
return Allow();
|
|
|
|
@@ -1736,10 +1741,10 @@ class GMPSandboxPolicy : public SandboxPolicyCommon {
|
|
|
|
return Allow();
|
|
|
|
case __NR_sched_get_priority_min:
|
|
|
|
case __NR_sched_get_priority_max:
|
|
|
|
+ case __NR_sched_setscheduler:
|
|
|
|
return Allow();
|
|
|
|
case __NR_sched_getparam:
|
|
|
|
- case __NR_sched_getscheduler:
|
|
|
|
- case __NR_sched_setscheduler: {
|
|
|
|
+ case __NR_sched_getscheduler: {
|
|
|
|
Arg<pid_t> pid(0);
|
|
|
|
return If(pid == 0, Allow()).Else(Trap(SchedTrap, nullptr));
|
|
|
|
}
|