Bug 1409900 - Disallow quotactl in sandboxed content processes. r=gcp draft
authorJed Davis <jld@mozilla.com>
Wed, 25 Oct 2017 12:43:13 -0600
changeset 688059 f19339207df8aefb66b334de7eb4686fad820504
parent 687660 ae49d4a5762264ded3aae4006baddc2203b79b94
child 688060 877ce6f1fa91c454cd2306e3a8a882d3617e9215
push id86658
push userbmo:jld@mozilla.com
push dateSat, 28 Oct 2017 03:11:29 +0000
reviewersgcp
bugs1409900
milestone58.0a1
Bug 1409900 - Disallow quotactl in sandboxed content processes. r=gcp MozReview-Commit-ID: 3svUgLLTZKL
security/sandbox/linux/SandboxFilter.cpp
--- a/security/sandbox/linux/SandboxFilter.cpp
+++ b/security/sandbox/linux/SandboxFilter.cpp
@@ -691,17 +691,16 @@ public:
     case __NR_getppid:
       return Trap(GetPPidTrap, nullptr);
 
       // Filesystem syscalls that need more work to determine who's
       // using them, if they need to be, and what we intend to about it.
     case __NR_getcwd:
     CASES_FOR_statfs:
     CASES_FOR_fstatfs:
-    case __NR_quotactl:
     CASES_FOR_fchown:
     case __NR_fchmod:
     case __NR_flock:
       return Allow();
 
       // Bug 1354731: proprietary GL drivers try to mknod() their devices
     case __NR_mknod: {
       Arg<mode_t> mode(1);