Bug 1296309 - Remove unused syscalls from the seccomp whitelist. r?tedd draft
authorGian-Carlo Pascutto <gcp@mozilla.com>
Thu, 18 Aug 2016 16:56:12 +0200
changeset 402608 c842699bb87eec7b767faa538ed36b3093d71eef
parent 401759 cf311c1a56f1d1ea654cf0dff120fe0403d849d6
child 528724 fba42bb56cd7ca4580811864134f8c0dd142c424
push id26714
push usergpascutto@mozilla.com
push dateThu, 18 Aug 2016 14:58:33 +0000
reviewerstedd
bugs1296309
milestone51.0a1
Bug 1296309 - Remove unused syscalls from the seccomp whitelist. r?tedd MozReview-Commit-ID: BUDRwsuAu0W
security/sandbox/linux/SandboxFilter.cpp
--- a/security/sandbox/linux/SandboxFilter.cpp
+++ b/security/sandbox/linux/SandboxFilter.cpp
@@ -532,17 +532,16 @@ public:
     case __NR_rmdir:
     case __NR_getcwd:
     CASES_FOR_statfs:
     CASES_FOR_fstatfs:
     case __NR_chmod:
     case __NR_rename:
     case __NR_symlink:
     case __NR_quotactl:
-    case __NR_utimes:
     case __NR_link:
     case __NR_unlink:
     CASES_FOR_fchown:
     case __NR_fchmod:
 #endif
       return Allow();
 
     case __NR_readlink:
@@ -633,19 +632,17 @@ public:
       return Allow();
 
     CASES_FOR_getrlimit:
     case __NR_clock_getres:
     CASES_FOR_getresuid:
     CASES_FOR_getresgid:
       return Allow();
 
-    case __NR_umask:
     case __NR_kill:
-    case __NR_wait4:
 #ifdef __NR_arch_prctl
     case __NR_arch_prctl:
 #endif
       return Allow();
 
     case __NR_eventfd2:
     case __NR_inotify_init1:
     case __NR_inotify_add_watch: