Index: sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc |
diff --git a/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc b/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc |
index 4b98366c69760342fbfacaf218fb37f647dce481..57bffc08424b93662f4db9e5c004e8c0f9662955 100644 |
--- a/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc |
+++ b/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc |
@@ -52,6 +52,10 @@ |
#define PR_SET_TIMERSLACK_PID 41 |
#endif |
+#ifndef PR_SET_PTRACER |
+#define PR_SET_PTRACER 0x59616d61 |
+#endif |
+ |
#endif // defined(OS_ANDROID) |
#if defined(__arm__) && !defined(MAP_STACK) |
@@ -143,7 +147,7 @@ ResultExpr RestrictPrctl() { |
.CASES((PR_GET_NAME, PR_SET_NAME, PR_GET_DUMPABLE, PR_SET_DUMPABLE |
#if defined(OS_ANDROID) |
, |
- PR_SET_VMA, PR_SET_TIMERSLACK_PID |
+ PR_SET_VMA, PR_SET_TIMERSLACK_PID, PR_SET_PTRACER |
#endif |
), |
Allow()) |