drgreen/android_frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Make seccomp honor setenforce"

Browse Source
This commit is contained in:
Treehugger Robot
2017-03-04 02:08:53 +00:00
committed by Gerrit Code Review
parent 6ac19c0d23 ffad2adfa5
commit c337e32bb0
2 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
core/jni/Android.mk
View File

@ -218,6 +218,8 @@ LOCAL_C_INCLUDES += \
LOCAL_STATIC_LIBRARIES := \ LOCAL_STATIC_LIBRARIES := \
libseccomp_policy \ libseccomp_policy \
libselinux \
libcrypto \
LOCAL_SHARED_LIBRARIES := \ LOCAL_SHARED_LIBRARIES := \
libmemtrack \ libmemtrack \

7
core/jni/android_os_seccomp.cpp
View File

@ -17,9 +17,16 @@
#include "core_jni_helpers.h" #include "core_jni_helpers.h"
#include "JniConstants.h" #include "JniConstants.h"
#include "utils/Log.h" #include "utils/Log.h"
#include <selinux/selinux.h>
#include "seccomp_policy.h" #include "seccomp_policy.h"
static void Seccomp_setPolicy(JNIEnv* /*env*/) { static void Seccomp_setPolicy(JNIEnv* /*env*/) {
if (security_getenforce() == 0) {
ALOGI("seccomp disabled by setenforce 0");
return;
}
if (!set_seccomp_filter()) { if (!set_seccomp_filter()) {
ALOGE("Failed to set seccomp policy - killing"); ALOGE("Failed to set seccomp policy - killing");
exit(1); exit(1);