removed seccomp filters ressurect
Describe the bug/描述 bug
Looks like if a process launched from apatch root shell that was launched from android application (termux, for example) sets its own seccomp filter all previous filters set by zygote ressurect.
Reproduce method/复现方法
This code causes bad system call if launched from termux and do not cause bad system call if launched from apatch root shell
#include <unistd.h>
void main()
{
setgroups(0,0);
}
But take, for example, nfqws from here : https://github.com/bol-van/zapret/releases/download/v70.6/zapret-v70.6.tar.gz Run 'strace nfqws --qnum 0' and you see bad system call.
This is because it sets own seccomp filter then calls setgroups. It's seccomp filter does not filter setgroups systecall and process works fine from magisk root shell
Expected behavior/预期行为
Patched seccomp filters must never show up again
Actual behaviour /实际行为
Patched seccomp filters ressurect
Screenshots/截图
No response
Logs/日志
No response
Device Name/设备名称
?
OS Version/系统版本
?
APatch Version/APatch 版本
?
Kernel Version/内核版本
?
KernelPatch Version/KernelPatch 版本
?