diff options
| author | Steve Muckle <smuckle@google.com> | 2017-07-20 13:11:54 -0700 |
|---|---|---|
| committer | Steve Muckle <smuckle@google.com> | 2017-07-21 20:30:21 -0700 |
| commit | aa3f96c9c429fa6270d86fbd6485e3b12d7d9aa6 (patch) | |
| tree | 0c8221de1a0114d281bef45912f35dee6f6c3db3 /libc/stdio/stdio.cpp | |
| parent | b8ce93974a675029c2c8360adf18bc67740658e1 (diff) | |
Create global seccomp policy.
Enabling seccomp across all processes, rather than just zygote, is
useful for auditing the syscall usage of AOSP. Create a global seccomp
policy that can optionally be enabled by init.
Bug: 37960259
Test: confirm global seccomp by removing finit_module from policy and
observing modprobe fail, confirm regular seccomp unchanged by
comparing length of installed bpf
Change-Id: Iac53a42fa26a80b05126f262dd9525f4f66df558
Diffstat (limited to 'libc/stdio/stdio.cpp')
0 files changed, 0 insertions, 0 deletions