Bug 1141885 - Make readlink() fail instead of allowing it, for B2G content processes. r=kang

This commit is contained in:
Jed Davis 2015-03-13 13:47:56 -07:00
parent fe5a1b6a4e
commit 769b91bcaa

View File

@ -207,8 +207,8 @@ SandboxFilterImplContent::Build() {
Allow(SOCKETCALL(socketpair, SOCKETPAIR));
Deny(EACCES, SOCKETCALL(socket, SOCKET));
Allow(SYSCALL(open));
Allow(SYSCALL(readlink)); /* Workaround for bug 964455 */
Allow(SYSCALL(readlinkat)); /* Workaround for bug 964455 */
Deny(EINVAL, SYSCALL(readlink)); /* Workaround for bug 964455 */
Deny(EINVAL, SYSCALL(readlinkat)); /* Workaround for bug 964455 */
Allow(SYSCALL(prctl));
Allow(SYSCALL(access));
Allow(SYSCALL(fsync));