Bug 1140111 - Whitelist readlinkat along with readlink. r=kang, a=bajaj
authorJed Davis <jld@mozilla.com>
Sat, 07 Mar 2015 10:44:23 -0500
changeset 237625 b06c5b277f30802a9671b6639bad9f0238008d28
parent 237624 f1eeff29d64a76ed36ff8e508d770a50a8bb7148
child 237626 743955e3644c9c4fc6efe5b0f700add9d066f2cc
push id314
push userryanvm@gmail.com
push dateFri, 13 Mar 2015 01:33:18 +0000
treeherdermozilla-b2g37_v2_2@535d2726240f [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewerskang, bajaj
bugs1140111
milestone37.0
Bug 1140111 - Whitelist readlinkat along with readlink. r=kang, a=bajaj
security/sandbox/linux/SandboxFilter.cpp
--- a/security/sandbox/linux/SandboxFilter.cpp
+++ b/security/sandbox/linux/SandboxFilter.cpp
@@ -204,16 +204,17 @@ SandboxFilterImplContent::Build() {
   Allow(SYSCALL_LARGEFILE(fstat, fstat64));
   Allow(SYSCALL_LARGEFILE(stat, stat64));
   Allow(SYSCALL_LARGEFILE(lstat, lstat64));
   Allow(SYSCALL_LARGEFILE(newfstatat, fstatat64));
   Allow(SOCKETCALL(socketpair, SOCKETPAIR));
   Deny(EACCES, SOCKETCALL(socket, SOCKET));
   Allow(SYSCALL(open));
   Allow(SYSCALL(readlink)); /* Workaround for bug 964455 */
+  Allow(SYSCALL(readlinkat)); /* Workaround for bug 964455 */
   Allow(SYSCALL(prctl));
   Allow(SYSCALL(access));
   Allow(SYSCALL(unlink));
   Allow(SYSCALL(unlinkat));
   Allow(SYSCALL(fsync));
   Allow(SYSCALL(msync));
 
 #if defined(ANDROID) && !defined(MOZ_MEMORY)