[Android] Allow __NR_sysinfo and __NR_clock_getres under seccomp.

[Android] Allow __NR_sysinfo and __NR_clock_getres under seccomp.

sysinfo() is allowed unconditionally, while clock_getres() is restricted to the
set of clk_ids that clock_gettime() is.

BUG=655277, 655299
R=rickyz@chromium.org

Committed: https://crrev.com/6cc408a029eb5fc6d9c10f556df6c717fcaabb9a
Cr-Commit-Position: refs/heads/master@{#424911}

[rickyz (no longer on Chrome), 2016-10-12 22:24:50]

lgtm

https://codereview.chromium.org/2417673002/diff/1/content/common/sandbox_linu...
File content/common/sandbox_linux/android/sandbox_bpf_base_policy_android.cc
(right):

https://codereview.chromium.org/2417673002/diff/1/content/common/sandbox_linu...
content/common/sandbox_linux/android/sandbox_bpf_base_policy_android.cc:124:
override_and_allow = true;
This doesn't have anything to do with your change, but out of curiosity, why the
override_and_allow variable instead of just returning Allow()?

[Robert Sesek, 2016-10-12 23:24:01]

Thanks!

https://codereview.chromium.org/2417673002/diff/1/content/common/sandbox_linu...
File content/common/sandbox_linux/android/sandbox_bpf_base_policy_android.cc
(right):

https://codereview.chromium.org/2417673002/diff/1/content/common/sandbox_linu...
content/common/sandbox_linux/android/sandbox_bpf_base_policy_android.cc:124:
override_and_allow = true;
On 2016/10/12 22:24:50, rickyz wrote:
> This doesn't have anything to do with your change, but out of curiosity, why
the
> override_and_allow variable instead of just returning Allow()?

I don't know why. It goes back to the initial version of the policy. I can clean
that up in a later CL.

[Robert Sesek, 2016-10-12 23:24:39]

The CQ bit was checked by rsesek@chromium.org

[commit-bot: I haz the power, 2016-10-12 23:25:07]

CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2016-10-12 23:52:35]

Committed patchset #1 (id:1)

[commit-bot: I haz the power, 2016-10-12 23:55:22]

Description was changed from

==========
[Android] Allow __NR_sysinfo and __NR_clock_getres under seccomp.

sysinfo() is allowed unconditionally, while clock_getres() is restricted to the
set of clk_ids that clock_gettime() is.

BUG=655277,655299
R=rickyz@chromium.org
==========

to

==========
[Android] Allow __NR_sysinfo and __NR_clock_getres under seccomp.

sysinfo() is allowed unconditionally, while clock_getres() is restricted to the
set of clk_ids that clock_gettime() is.

BUG=655277,655299
R=rickyz@chromium.org

Committed: https://crrev.com/6cc408a029eb5fc6d9c10f556df6c717fcaabb9a
Cr-Commit-Position: refs/heads/master@{#424911}
==========

[commit-bot: I haz the power, 2016-10-12 23:55:23]

Patchset 1 (id:??) landed as
https://crrev.com/6cc408a029eb5fc6d9c10f556df6c717fcaabb9a
Cr-Commit-Position: refs/heads/master@{#424911}