Bug 1308568 - Add missing filesystem calls to Allow in case broker is disabled. r?haik draft
authorGian-Carlo Pascutto <gcp@mozilla.com>
Fri, 07 Oct 2016 20:58:11 +0200
changeset 422283 446920b7e832e6c665092406794b7f8382b8ffa8
parent 422268 a0789005be29dfe48a4905b9b158640c67e78f23
child 422286 e1eda2831208fd11b5462dfda3d4518ac152de7d
push id31726
push usergpascutto@mozilla.com
push dateFri, 07 Oct 2016 18:58:33 +0000
reviewershaik
bugs1308568
milestone52.0a1
Bug 1308568 - Add missing filesystem calls to Allow in case broker is disabled. r?haik MozReview-Commit-ID: 6AdKbBH0NMh
security/sandbox/linux/SandboxFilter.cpp
--- a/security/sandbox/linux/SandboxFilter.cpp
+++ b/security/sandbox/linux/SandboxFilter.cpp
@@ -590,16 +590,24 @@ public:
       switch(sysno) {
       case __NR_open:
       case __NR_openat:
       case __NR_access:
       case __NR_faccessat:
       CASES_FOR_stat:
       CASES_FOR_lstat:
       CASES_FOR_fstatat:
+      CASES_FOR_chmod:
+      case __NR_link:
+      case __NR_mkdir:
+      case __NR_symlink:
+      case __NR_rename:
+      case __NR_rmdir:
+      case __NR_unlink:
+      case __NR_readlink:
         return Allow();
       }
     }
 
     switch (sysno) {
 #ifdef DESKTOP
     case __NR_getppid:
       return Trap(GetPPidTrap, nullptr);