Android 8.0+ Seccomp filter Problem

[exalab999]

Seccomp filter is a security feature added in Android Oreo (8.0):

What is Seccomp: Wikipedia

Official News : News

Seccomp filter cause a lot of issue for this app, such as unable to install systemd package, and some applications failed to run. If you have any suggestions, please comment below.

[josephworks]

https://android-developers.googleblog.com/2017/07/seccomp-filter-in-android-o.html?m=1

Toggling seccomp filters during testing
In addition to logging errors, the seccomp installer respects setenforce on devices running userdebug and eng builds, which allows you to test whether seccomp is responsible for an issue. If you type:

adb shell setenforce 0 && adb stop && adb start

then no seccomp policy will be installed into zygote. Because you cannot remove a seccomp policy from a running process, you have to restart the shell for this option to take effect.

[exalab999]

Currently the image are come with systemd preinstalled, which solve part of this issue.

However, installing some of the package would still affected by this error

[exalab999]

This issue is now fixed with Patch 2 in app, but some restriction will remain, this could not bypass currently, even with Root Access, but it may change as research going.