pa-fazil
/
android_bionic
mirror of https://github.com/fazilsheik96/android_bionic.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
21,269 Commits 3 Branches 0 Tags 65 MiB
Commit Graph

11 Commits

Author SHA1 Message Date
Josh Gao de9262e5c5 Add syscalls that aren't currently used to the seccomp whitelist. 
Add some useful new syscalls that we currently aren't using in bionic,
but might in the future to the seccomp whitelist.

Bug: http://b/37317198
Test: mma
Change-Id: I6550867da152cea84fb13d0c15a399cdb2acf1aa
 2017-04-19 13:45:47 -07:00
Paul Lawrence 3dd3d55af2 Add seccomp blacklist, and exclude swap functions 
Bug: 37253880
Test: Make sure device boots
      Run pylint on genseccomp.py, test_genseccomp.py
      Run test_genseccomp.py
      Run new CTS test
      cts-tradefed run cts -m CtsSecurityTestCases -t android.security.cts.SeccompTest

Change-Id: I833a5364a1481d65173e77654da1798dc45a3f9d
 2017-04-12 19:34:33 +00:00
Paul Lawrence 8b7a3559c1 Expand whitelist 
Bug: 36726183
Test: Builds, call 90 added to policy

(cherry picked from commit 3ba8223b9a)

Change-Id: Ib8db1b764ce22aadf8050031d40040dd6c0e669e
 2017-03-31 16:01:32 +00:00
Paul Lawrence 6a6d669bfc Expand whitelist 
Bug: 36449658
Test: Builds
Change-Id: I610da03e7a3cede218d1657f53797ab72cbdf317
 2017-03-23 12:21:29 -07:00
Paul Lawrence 822ecece23 Expand whitelist 
Bug: 36435222
Test: App starts, plays game
Change-Id: If21f59e4d218be64fdac46115d35dc1ffb6fe771
 2017-03-20 11:03:19 -07:00
Paul Lawrence 89fa81fda3 Support all architectures in seccomp 
Test: Make sure arm, x86, x86_64, mips, mips64 emulators boot
      Make sure sailfish still boots
      Ran CTS test from
      https://android-review.googlesource.com/#/c/348671/3 and it passed
      The instructions for how to run mips emulators above worked, but
      the CTS tests did not seem to actually run.

Change-Id: Iddee5acdb19ed32c7bd4657573313ca439cf6a49
 2017-03-13 18:26:50 +00:00
Paul Lawrence 34ddaaf256 Expand whitelist 
Bug: 35879294
Test: Builds, boots. No easy test for reported issues.
Change-Id: Ib68a36f849a8dab14426600cdc6401fa8bb5b914
 2017-03-07 15:23:08 -08:00
Paul Lawrence e6daf3f34a Expand whitelist 
Bug: 35917228
Test: App now runs fine with setenforce 0
Change-Id: I039385e5d0e5105ec337c62dd098dd1662442a2e
 2017-03-03 11:19:08 -08:00
Paul Lawrence 7b4e7c4d55 Expand whitelist 
Bug: 35906875
Test: Device boots, app runs further and fails with different error
Change-Id: I8df40ff85f8248504bca9a048510153970b31716
 2017-03-02 18:48:13 +00:00
Paul Lawrence 0b2486a324 Expand whitelist 
Bug: 35217603
Test: App no longer triggers seccomp exceptions when launched
Change-Id: I8ea904640a2f14c67a075e593067327407766220
 2017-02-23 13:04:39 -08:00
Paul Lawrence 7ea4090c65 Autogenerate single policy from syscalls and whitelist 
Bug: 35392119
Bug: 34465958
Test: Check boots and same syscalls are blocked as before

Change-Id: I9efa97032c59aebbbfd32e6f0d2d491f6254f0a2
 2017-02-23 10:46:56 -08:00