Victor Hsieh fa046a1c9e Fix seccomp filter set up in zygote ...

This needs to land with extra syscalls whitelisted, including capset and
setresuid.  These privileged syscalls are used in the setup after the
filter is initialized.

Test: system starts, different apps run
Bug: 63944145
Bug: 76461821
Change-Id: I49e6b292805f35baffb3530461c8741e75aceb32

2018-03-28 16:26:28 -07:00

..

android

…

hwbinder

…

include/android_runtime

…

android_animation_PropertyValuesHolder.cpp

…

android_app_Activity.cpp

…

android_app_admin_SecurityLog.cpp

…

android_app_ApplicationLoaders.cpp

…

android_app_backup_FullBackup.cpp

…

android_app_NativeActivity.cpp

…

android_backup_BackupDataInput.cpp

…

android_backup_BackupDataOutput.cpp

…

android_backup_BackupHelperDispatcher.cpp

…

android_backup_FileBackupHelperBase.cpp

…

android_content_res_Configuration.cpp

…

android_content_res_ObbScanner.cpp

…

android_database_CursorWindow.cpp

…

android_database_SQLiteCommon.cpp

…

android_database_SQLiteCommon.h

…

android_database_SQLiteConnection.cpp

…

android_database_SQLiteDebug.cpp

…

android_database_SQLiteGlobal.cpp

…

android_ddm_DdmHandleNativeHeap.cpp

…

android_graphics_Canvas.cpp

…

android_graphics_drawable_AnimatedVectorDrawable.cpp

…

android_graphics_drawable_VectorDrawable.cpp

…

android_graphics_Picture.cpp

…

android_hardware_camera2_CameraMetadata.cpp

…

android_hardware_camera2_DngCreator.cpp

…

android_hardware_camera2_legacy_LegacyCameraDevice.cpp

…

android_hardware_camera2_legacy_PerfMeasurement.cpp

…

android_hardware_Camera.cpp

…

android_hardware_display_DisplayViewport.cpp

…

android_hardware_display_DisplayViewport.h

…

android_hardware_HardwareBuffer.cpp

…

android_hardware_location_ActivityRecognitionHardware.cpp

…

android_hardware_SensorManager.cpp

…

android_hardware_SerialPort.cpp

…

android_hardware_SoundTrigger.cpp

…

android_hardware_UsbDevice.cpp

…

android_hardware_UsbDeviceConnection.cpp

…

android_hardware_UsbRequest.cpp

…

android_media_AudioErrors.h

…

android_media_AudioFormat.h

…

android_media_AudioRecord.cpp

…

android_media_AudioSystem.cpp

…

android_media_AudioTrack.cpp

…

android_media_AudioTrack.h

…

android_media_DeviceCallback.cpp

…

android_media_DeviceCallback.h

…

android_media_JetPlayer.cpp

…

android_media_RemoteDisplay.cpp

…

android_media_ToneGenerator.cpp

…

android_net_LocalSocketImpl.cpp

…

android_net_NetUtils.cpp

…

android_nio_utils.cpp

…

android_nio_utils.h

…

android_opengl_EGL14.cpp

…

android_opengl_EGLExt.cpp

…

android_opengl_GLES10.cpp

…

android_opengl_GLES10Ext.cpp

…

android_opengl_GLES11.cpp

…

android_opengl_GLES11Ext.cpp

…

android_opengl_GLES20.cpp

…

android_opengl_GLES30.cpp

…

android_opengl_GLES31.cpp

…

android_opengl_GLES31Ext.cpp

…

android_opengl_GLES32.cpp

…

android_os_Debug.cpp

…

android_os_Debug.h

…

android_os_GraphicsEnvironment.cpp

…

android_os_HidlSupport.cpp

…

android_os_HwBinder.cpp

…

android_os_HwBinder.h

…

android_os_HwBlob.cpp

…

android_os_HwBlob.h

…

android_os_HwParcel.cpp

HIDL: Check error value.

2018-01-17 13:26:35 -08:00

android_os_HwParcel.h

…

android_os_HwRemoteBinder.cpp

…

android_os_HwRemoteBinder.h

…

android_os_MemoryFile.cpp

…

android_os_MessageQueue.cpp

…

android_os_MessageQueue.h

…

android_os_Parcel.cpp

Don't use cutils/Atomic.h

2018-02-23 15:02:42 -08:00

android_os_Parcel.h

…

android_os_SELinux.cpp

…

android_os_SharedMemory.cpp

…

android_os_SystemClock.cpp

…

android_os_SystemProperties.cpp

Frameworks: Handle exceptions in SystemProperties callbacks

2018-03-19 08:36:11 -07:00

android_os_Trace.cpp

…

android_os_UEventObserver.cpp

…

android_os_VintfObject.cpp

Merge "VintfObject: add getTargetFcmVersion"

2018-02-08 20:12:02 +00:00

android_os_VintfRuntimeInfo.cpp

…

android_server_NetworkManagementSocketTagger.cpp

…

android_server_Watchdog.cpp

…

android_text_AndroidBidi.cpp

…

android_text_AndroidCharacter.cpp

…

android_text_StaticLayout.cpp

…

android_util_AssetManager.cpp

…

android_util_Binder.cpp

Don't use cutils/Atomic.h

2018-02-23 15:02:42 -08:00

android_util_Binder.h

…

android_util_EventLog.cpp

…

android_util_FileObserver.cpp

…

android_util_jar_StrictJarFile.cpp

…

android_util_Log.cpp

…

android_util_Log.h

…

android_util_MemoryIntArray.cpp

…

android_util_PathParser.cpp

…

android_util_Process.cpp

…

android_util_StringBlock.cpp

…

android_util_XmlBlock.cpp

…

android_view_DisplayEventReceiver.cpp

…

android_view_DisplayListCanvas.cpp

…

android_view_HardwareLayer.cpp

…

android_view_InputChannel.cpp

…

android_view_InputChannel.h

…

android_view_InputDevice.cpp

…

android_view_InputDevice.h

…

android_view_InputEventReceiver.cpp

…

android_view_InputEventSender.cpp

…

android_view_InputQueue.cpp

…

android_view_KeyCharacterMap.cpp

…

android_view_KeyCharacterMap.h

…

android_view_KeyEvent.cpp

…

android_view_KeyEvent.h

…

android_view_MotionEvent.cpp

…

android_view_MotionEvent.h

…

android_view_PointerIcon.cpp

…

android_view_PointerIcon.h

…

android_view_RenderNode.cpp

…

android_view_RenderNodeAnimator.cpp

…

android_view_Surface.cpp

…

android_view_SurfaceControl.cpp

…

android_view_SurfaceSession.cpp

…

android_view_TextureView.cpp

…

android_view_ThreadedRenderer.cpp

…

android_view_VelocityTracker.cpp

…

Android.bp

Add bpf support for NetworkStatsFactory

2018-01-23 00:34:53 -08:00

AndroidRuntime.cpp

Remove non-tombstoned ANR path.

2018-03-28 17:54:26 +00:00

BindTest.cpp

…

com_android_internal_content_NativeLibraryHelper.cpp

…

com_android_internal_net_NetworkStatsFactory.cpp

Add bpf support for NetworkStatsFactory

2018-01-23 00:34:53 -08:00

com_android_internal_os_ClassLoaderFactory.cpp

…

com_android_internal_os_FuseAppLoop.cpp

…

com_android_internal_os_Zygote.cpp

Fix seccomp filter set up in zygote

2018-03-28 16:26:28 -07:00

com_android_internal_os_ZygoteInit.cpp

…

com_android_internal_util_VirtualRefBasePtr.cpp

…

com_android_internal_view_animation_NativeInterpolatorFactoryHelper.cpp

…

com_google_android_gles_jni_EGLImpl.cpp

…

com_google_android_gles_jni_GLImpl.cpp

…

core_jni_helpers.h

…

eventlog_helper.h

…

fd_utils.cpp

Frameworks: Refactor FileDescriptorTable errors

2018-03-13 08:18:55 -07:00

fd_utils.h

Frameworks: Refactor FileDescriptorTable errors

2018-03-13 08:18:55 -07:00

GraphicsExternGlue.h

…

GraphicsRegisterGlue.h

…

MODULE_LICENSE_APACHE2

…

NOTICE

…