diff --git a/init/seccomp.cpp b/init/seccomp.cpp index b0688f37b..608c4e70f 100644 --- a/init/seccomp.cpp +++ b/init/seccomp.cpp @@ -234,6 +234,11 @@ bool set_seccomp_filter() { // b/34817266 AllowSyscall(f, 252); // __NR_epoll_wait + // Needed by sanitizers (b/34606909) + // 5 (__NR_open) and 195 (__NR_stat64) are also required, but they are + // already allowed. + AllowSyscall(f, 85); // __NR_readlink + // arm32-on-arm64 only filter - autogenerated from bionic syscall usage for (size_t i = 0; i < arm_filter_size; ++i) f.push_back(arm_filter[i]);