trunksd-seccomp-arm.policy revision 9caf492818a4cc51ba471534d3fcaa84c9ce0278
1#
2# Copyright (C) 2014 The Android Open Source Project
3#
4# Licensed under the Apache License, Version 2.0 (the "License");
5# you may not use this file except in compliance with the License.
6# You may obtain a copy of the License at
7#
8#      http://www.apache.org/licenses/LICENSE-2.0
9#
10# Unless required by applicable law or agreed to in writing, software
11# distributed under the License is distributed on an "AS IS" BASIS,
12# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13# See the License for the specific language governing permissions and
14# limitations under the License.
15#
16
17gettid: 1
18getuid32: 1
19geteuid32: 1
20getgid32: 1
21getegid32: 1
22getresuid32: 1
23getresgid32: 1
24
25clock_getres: 1
26clock_gettime: 1
27gettimeofday: 1
28
29epoll_create1: 1
30epoll_pwait: 1
31epoll_ctl: 1
32
33openat: 1
34read: 1
35write: 1
36writev: 1
37close: 1
38fstat64: 1
39_llseek: 1
40lseek: 1
41fcntl64: 1
42readlinkat: 1
43faccessat: 1
44pipe2: 1
45socket: 1
46connect: 1
47
48futex: 1
49
50restart_syscall: 1
51exit: 1
52exit_group: 1
53rt_sigreturn: 1
54sigaltstack: 1
55personality: 1
56
57brk: 1
58mmap2: 1
59munmap: 1
60madvise: 1
61
62# Allow thread creation.
63mprotect: 1
64clone: 1
65set_robust_list: 1
66# This is attempted but apparently not necessary; return EPERM.
67prctl: return 1
68gettid: 1
69set_tid_address: 1
70
71rt_sigprocmask: 1
72signalfd4: 1
73ioctl: 1
74getpriority: 1
75exit: 1
76exit_group: 1
77chdir: 1
78