Linux sandbox: restrict clock_gettime() and clock_getres()

sandbox/linux/seccomp-bpf-helpers/syscall_sets.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/linux/seccomp-bpf-helpers/syscall_sets.h"
 
 #include "build/build_config.h"
 #include "sandbox/linux/services/linux_syscalls.h"
 
 namespace sandbox {
 
 // The functions below cover all existing i386, x86_64, and ARM system calls;
 // excluding syscalls made obsolete in ARM EABI.
 // The implicitly defined sets form a partition of the sets of
 // system calls.
 
 bool SyscallSets::IsKill(int sysno) {
   switch (sysno) {
     case __NR_kill:
     case __NR_tgkill:
     case __NR_tkill:  // Deprecated.
       return true;
     default:
       return false;
   }
 }
 
 bool SyscallSets::IsAllowedGettime(int sysno) {
   switch (sysno) {
-    case __NR_clock_gettime:
     case __NR_gettimeofday:
 #if defined(__i386__) || defined(__x86_64__) || defined(__mips__)
     case __NR_time:
 #endif
       return true;
     case __NR_adjtimex:         // Privileged.
     case __NR_clock_adjtime:    // Privileged.
     case __NR_clock_getres:     // Could be allowed.
+    case __NR_clock_gettime:
     case __NR_clock_nanosleep:  // Could be allowed.
     case __NR_clock_settime:    // Privileged.
 #if defined(__i386__) || defined(__mips__)
     case __NR_ftime:  // Obsolete.
 #endif
     case __NR_settimeofday:  // Privileged.
 #if defined(__i386__) || defined(__mips__)
     case __NR_stime:
 #endif
     default:
@@ skipping 1003 matching lines @@
   switch (sysno) {
     case __NR_sysmips:
     case __NR_unused150:
       return true;
     default:
       return false;
   }
 }
 #endif  // defined(__mips__)
 }  // namespace sandbox.