Closed Bug 1275786 Opened 5 years ago Closed 5 years ago

Seccomp sandbox violation: sys_listen called in content process of Firefox desktop

Categories

(Core :: Security: Process Sandboxing, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED
mozilla49
Tracking Status
firefox49 --- fixed

People

(Reporter: tedd, Assigned: tedd)

References

Details

(Whiteboard: sblc1)

Attachments

(1 file)

Running tests on try with seccomp enabled, hit a seccomp violation by using sys_listen().
For now, in order to get seccomp enabled on nightly, I think we should whitelist this and try to figure out later how we can reduce the system calls for the socket API.
Attachment #8757322 - Flags: review?(jld) → review+
Keywords: checkin-needed
Pushed by ryanvm@gmail.com:
https://hg.mozilla.org/integration/mozilla-inbound/rev/31b951c44b4c
Add sys_listen to seccomp whitelist. r=jld
Keywords: checkin-needed
https://hg.mozilla.org/mozilla-central/rev/31b951c44b4c
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla49
You need to log in before you can comment on or make changes to this bug.