sandbox: Update known syscalls to kernel 3.17

sandbox/linux/seccomp-bpf-helpers/syscall_sets.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/linux/seccomp-bpf-helpers/syscall_sets.h"
 
 #include "build/build_config.h"
 #include "sandbox/linux/services/linux_syscalls.h"
 
 namespace sandbox {
@@ skipping 89 matching lines @@
     case __NR_link:
     case __NR_linkat:
     case __NR_lookup_dcookie:  // ENOENT not a valid errno.
     case __NR_lstat:           // EPERM not a valid errno.
 #if defined(__i386__)
     case __NR_oldlstat:
 #endif
 #if defined(__i386__) || defined(__arm__) || defined(__mips__)
     case __NR_lstat64:
 #endif
+#if !defined(__mips__)
+    case __NR_memfd_create:
+#endif
     case __NR_mkdir:
     case __NR_mkdirat:
     case __NR_mknod:
     case __NR_mknodat:
     case __NR_open:
     case __NR_openat:
     case __NR_readlink:  // EPERM not a valid errno.
     case __NR_readlinkat:
     case __NR_rename:
     case __NR_renameat:
+    case __NR_renameat2:
     case __NR_rmdir:
     case __NR_stat:  // EPERM not a valid errno.
 #if defined(__i386__)
     case __NR_oldstat:
 #endif
 #if defined(__i386__) || defined(__arm__) || defined(__mips__)
     case __NR_stat64:
 #endif
     case __NR_statfs:  // EPERM not a valid errno.
 #if defined(__i386__) || defined(__arm__) || defined(__mips__)
@@ skipping 427 matching lines @@
 #if defined(__x86_64__)
     case __NR_arch_prctl:
 #endif
     case __NR_prctl:
       return true;
     default:
       return false;
   }
 }
 
+bool SyscallSets::IsSeccomp(int sysno) {
+  switch (sysno) {
+    case __NR_seccomp:
+      return true;
+    default:
+      return false;
+  }
+}
+
 bool SyscallSets::IsAllowedBasicScheduler(int sysno) {
   switch (sysno) {
     case __NR_sched_yield:
     case __NR_pause:
     case __NR_nanosleep:
       return true;
     case __NR_getpriority:
 #if defined(__i386__) || defined(__arm__) || defined(__mips__)
     case __NR_nice:
 #endif
@@ skipping 21 matching lines @@
 
 bool SyscallSets::IsKernelModule(int sysno) {
   switch (sysno) {
 #if defined(__i386__) || defined(__x86_64__) || defined(__mips__)
     case __NR_create_module:
     case __NR_get_kernel_syms:  // Should ENOSYS.
     case __NR_query_module:
 #endif
     case __NR_delete_module:
     case __NR_init_module:
+    case __NR_finit_module:
       return true;
     default:
       return false;
   }
 }
 
 bool SyscallSets::IsGlobalFSViewChange(int sysno) {
   switch (sysno) {
     case __NR_pivot_root:
     case __NR_chroot:
@@ skipping 72 matching lines @@
     default:
       return false;
   }
 }
 
 bool SyscallSets::IsDebug(int sysno) {
   switch (sysno) {
     case __NR_ptrace:
     case __NR_process_vm_readv:
     case __NR_process_vm_writev:
-#if defined(__i386__) || defined(__x86_64__) || defined(__mips__)
     case __NR_kcmp:
-#endif
       return true;
     default:
       return false;
   }
 }
 
 bool SyscallSets::IsGlobalSystemStatus(int sysno) {
   switch (sysno) {
     case __NR__sysctl:
     case __NR_sysfs:
@@ skipping 114 matching lines @@
     case __NR_ioprio_set:
     case __NR_sched_get_priority_max:
     case __NR_sched_get_priority_min:
     case __NR_sched_getaffinity:
     case __NR_sched_getparam:
     case __NR_sched_getscheduler:
     case __NR_sched_rr_get_interval:
     case __NR_sched_setaffinity:
     case __NR_sched_setparam:
     case __NR_sched_setscheduler:
+    case __NR_sched_setattr:

[jln (very slow on Chromium), 2014/08/21 23:36:05]

Please, alphabetize.

+    case __NR_sched_getattr:
       return true;
     default:
       return false;
   }
 }
 
 bool SyscallSets::IsInotify(int sysno) {
   switch (sysno) {
     case __NR_inotify_add_watch:
     case __NR_inotify_init:
@@ skipping 61 matching lines @@
       return true;
     default:
       return false;
   }
 }
 
 // Various system calls that need to be researched.
 // TODO(jln): classify this better.
 bool SyscallSets::IsMisc(int sysno) {
   switch (sysno) {
+#if !defined(_mips_)
+    case __NR_getrandom:
+#endif
     case __NR_name_to_handle_at:
     case __NR_open_by_handle_at:
     case __NR_perf_event_open:
     case __NR_syncfs:
     case __NR_vhangup:
 // The system calls below are not implemented.
 #if defined(__i386__) || defined(__x86_64__) || defined(__mips__)
     case __NR_afs_syscall:
 #endif
 #if defined(__i386__) || defined(__mips__)
@@ skipping 70 matching lines @@
   switch (sysno) {
     case __NR_sysmips:
     case __NR_unused150:
       return true;
     default:
       return false;
   }
 }
 #endif  // defined(__mips__)
 }  // namespace sandbox.