From 3e662d3c7f2bb6ead2862315a00f2a1c5b239dfa Mon Sep 17 00:00:00 2001 From: Christopher Ferris Date: Thu, 22 Feb 2024 16:14:27 -0800 Subject: [PATCH] Fix up the debuggerd policy files. A few files were changed without using the generate script. Modify the original policy file and generate all of the policy files properly. Test: Verify the generated files are the same as before. Change-Id: Ic6979c06c5d290b3047c8307e86ec1e78a242d44 --- debuggerd/seccomp_policy/crash_dump.policy.def | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/debuggerd/seccomp_policy/crash_dump.policy.def b/debuggerd/seccomp_policy/crash_dump.policy.def index 972a57545..dc751da6b 100644 --- a/debuggerd/seccomp_policy/crash_dump.policy.def +++ b/debuggerd/seccomp_policy/crash_dump.policy.def @@ -25,8 +25,8 @@ getdents64: 1 faccessat: 1 recvmsg: 1 recvfrom: 1 -sysinfo: 1 setsockopt: 1 +sysinfo: 1 process_vm_readv: 1 @@ -53,20 +53,29 @@ prctl: arg0 == PR_GET_NO_NEW_PRIVS || arg0 == PR_SET_VMA #if 0 libminijail on vendor partitions older than P does not have constants from . -Define the values of PROT_READ and PROT_WRITE ourselves to maintain backwards compatibility. +Define values for PROT_READ, PROT_WRITE and PROT_MTE ourselves to maintain backwards compatibility. #else #define PROT_READ 0x1 #define PROT_WRITE 0x2 +#define PROT_MTE 0x20 #endif madvise: 1 +#if defined(__aarch64__) +mprotect: arg2 in PROT_READ|PROT_WRITE|PROT_MTE +#else mprotect: arg2 in PROT_READ|PROT_WRITE +#endif munmap: 1 #if defined(__LP64__) getuid: 1 fstat: 1 +#if defined(__aarch64__) +mmap: arg2 in PROT_READ|PROT_WRITE|PROT_MTE +#else mmap: arg2 in PROT_READ|PROT_WRITE +#endif #else getuid32: 1 fstat64: 1