diff --git a/modules/common/appspawn_adapter.cpp b/modules/common/appspawn_adapter.cpp index ab2e5e5e035b3f1e6e44775ae08b2a8ea68a9593..993b55714c68e9b514e0d929c37c631ca3227ede 100644 --- a/modules/common/appspawn_adapter.cpp +++ b/modules/common/appspawn_adapter.cpp @@ -162,10 +162,16 @@ int SetSeccompFilter(const AppSpawnMgr *content, const AppSpawningCtx *property) } } + // Set seccomp policy for input method security mode. if (CheckAppSpawnMsgFlag(property->message, TLV_MSG_FLAGS, APP_FLAGS_ISOLATED_SANDBOX) != 0) { appName = IMF_EXTENTOIN_NAME; } + // Set seccomp policy for atomic service process. + if (CheckAppMsgFlagsSet(property, APP_FLAGS_ATOMIC_SERVICE) != 0) { + appName = APP_ATOMIC; + } + if (!SetSeccompPolicyWithName(type, appName)) { APPSPAWN_LOGE("Failed to set %{public}s seccomp filter and exit %{public}d", appName, errno); return -EINVAL;