From 3871d0dcfa5d260a1c6e8f190ee9ebaa908ab3aa Mon Sep 17 00:00:00 2001
From: Liz Prucka <lizprucka@google.com>
Date: Mon, 1 May 2023 11:04:37 -0500
Subject: pkg/build/cuttlefish: sandbox cuttlefish bazel build

Android bazel builds are currently failing due to
a failure when running `rsync` from root. Building
the kernel from the syzkaller sandbox to circumvent
this issue.
---
 pkg/build/cuttlefish.go | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'pkg')

diff --git a/pkg/build/cuttlefish.go b/pkg/build/cuttlefish.go
index 8c4415587..fb6cb4e4d 100644
--- a/pkg/build/cuttlefish.go
+++ b/pkg/build/cuttlefish.go
@@ -35,6 +35,9 @@ func (c cuttlefish) runBuild(kernelDir, buildConfig string) error {
 
 func (c cuttlefish) runBazel(kernelDir string) error {
 	cmd := osutil.Command("tools/bazel", "run", "--kasan", bazelTarget, "--", "--dist_dir=dist")
+	if err := osutil.Sandbox(cmd, true, false); err != nil {
+		return err
+	}
 	cmd.Dir = kernelDir
 	_, err := osutil.Run(time.Hour, cmd)
 	return err
-- 
cgit mrf-deployment