1#
2# Copyright (C) 2015 The Android Open Source Project
3#
4# Licensed under the Apache License, Version 2.0 (the "License");
5# you may not use this file except in compliance with the License.
6# You may obtain a copy of the License at
7#
8#      http://www.apache.org/licenses/LICENSE-2.0
9#
10# Unless required by applicable law or agreed to in writing, software
11# distributed under the License is distributed on an "AS IS" BASIS,
12# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13# See the License for the specific language governing permissions and
14# limitations under the License.
15#
16
17# Tested on link
18gettid: 1
19getuid: 1
20geteuid: 1
21getgid: 1
22getegid: 1
23getresuid: 1
24getresgid: 1
25
26clock_getres: 1
27clock_gettime: 1
28gettimeofday: 1
29time: 1
30
31# Allow socket(domain==PF_LOCAL) or socket(domain==PF_NETLINK)
32socket: arg0 == 0x1 || arg0 == 0x10
33socketpair: 1
34connect: 1
35getsockname: 1
36pipe: 1
37sendmsg: 1
38sendto: 1
39recvmsg: 1
40recvfrom: 1
41
42epoll_create: 1
43epoll_wait: 1
44epoll_ctl: 1
45poll: 1
46
47open: 1
48read: 1
49write: 1
50close: 1
51access: 1
52rename: 1
53pwrite64: 1
54
55chmod: 1
56fsync: 1
57fdatasync: 1
58fstat: 1
59stat: 1
60lseek: 1
61fcntl: 1
62
63futex: 1
64set_robust_list: 1
65restart_syscall: 1
66exit: 1
67exit_group: 1
68rt_sigaction: 1
69rt_sigreturn: 1
70rt_sigprocmask: 1
71signalfd4: 1
72
73brk: 1
74mmap: 1
75madvise: 1
76mprotect: 1
77munmap: 1
78
79clone: 1
80# These calls are attempted but apparently not necessary; return EPERM.
81prctl: return 1
82ioctl: return 1
83tgkill: return 1
84