Linux sandbox: allow clock_getres() in renderers.

BUG=329053 R=jorgelo@chromium.org Review URL: https://codereview.chromium.org/116853002 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@241115 0039d316-1c4b-4281-b951-d872f2087c98
cbchan · Dec 17, 2013 · 4f4167c · 4f4167c
1 parent 2816c24
commit 4f4167c
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/content/common/sandbox_linux/bpf_renderer_policy_linux.cc b/content/common/sandbox_linux/bpf_renderer_policy_linux.cc
@@ -43,6 +43,9 @@ ErrorCode RendererProcessPolicy::EvaluateSyscall(SandboxBPF* sandbox,
     case __NR_prctl:
       return sandbox::RestrictPrctl(sandbox);
     // Allow the system calls below.
+    // The baseline policy allows __NR_clock_gettime. Allow
+    // clock_getres() for V8. crbug.com/329053.
+    case __NR_clock_getres:
     case __NR_fdatasync:
     case __NR_fsync:
     case __NR_getpriority: