From 7c290267c77e9bb03c53375112d68d5c9b4cef33 Mon Sep 17 00:00:00 2001
From: Nelson Liang <nelsonliang@google.com>
Date: Fri, 20 Dec 2024 10:10:52 -0800
Subject: [PATCH] Permit TCMalloc to use __NR_lseek

PiperOrigin-RevId: 708356515
Change-Id: I004ade8095acf7aae9ef82612af700629e2d0011
---
 sandboxed_api/sandbox2/policybuilder.cc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/sandboxed_api/sandbox2/policybuilder.cc b/sandboxed_api/sandbox2/policybuilder.cc
index 653ed3b9..4a832539 100644
--- a/sandboxed_api/sandbox2/policybuilder.cc
+++ b/sandboxed_api/sandbox2/policybuilder.cc
@@ -293,8 +293,8 @@ PolicyBuilder& PolicyBuilder::AllowTcMalloc() {
   allowed_complex_.tcmalloc = true;
   AllowTime();
   AllowRestartableSequences(kRequireFastFences);
-  AllowSyscalls(
-      {__NR_munmap, __NR_nanosleep, __NR_brk, __NR_mincore, __NR_membarrier});
+  AllowSyscalls({__NR_munmap, __NR_nanosleep, __NR_brk, __NR_mincore,
+                 __NR_membarrier, __NR_lseek});
   AllowLimitedMadvise();
   AllowPrctlSetVma();
   AllowPoll();