From 15fb5b960846db823a60c0fcd82eff05048356fa Mon Sep 17 00:00:00 2001
From: Wiktor Garbacz <wiktorg@google.com>
Date: Mon, 13 Nov 2023 04:21:53 -0800
Subject: [PATCH] Allow sigaltstack

`absl::GetStackTrace` on Aarch64 since
https://github.com/abseil/abseil-cpp/commit/bb7bbb12c770cfcbc3fcde9afca6964e962f500e will call sigaltstack.

PiperOrigin-RevId: 581914257
Change-Id: I316bdd64d1cef8a6327838681bda0067a0dc50fc
---
 .../sandbox2/examples/network_proxy/networkproxy_sandbox.cc      | 1 +
 1 file changed, 1 insertion(+)

diff --git a/sandboxed_api/sandbox2/examples/network_proxy/networkproxy_sandbox.cc b/sandboxed_api/sandbox2/examples/network_proxy/networkproxy_sandbox.cc
index da1c8008..490718a1 100644
--- a/sandboxed_api/sandbox2/examples/network_proxy/networkproxy_sandbox.cc
+++ b/sandboxed_api/sandbox2/examples/network_proxy/networkproxy_sandbox.cc
@@ -50,6 +50,7 @@ std::unique_ptr<sandbox2::Policy> GetPolicy(absl::string_view sandboxee_path) {
       .AllowSyscall(__NR_lseek)
       .AllowSyscall(__NR_munmap)
       .AllowSyscall(__NR_getpid)
+      .AllowSyscall(__NR_sigaltstack)
       .AllowTcMalloc()
       .AddLibrariesForBinary(sandboxee_path);
   if (absl::GetFlag(FLAGS_connect_with_handler)) {