65 lines
1.3 KiB
Plaintext
65 lines
1.3 KiB
Plaintext
|
# Organized by frequency of systemcall - in descending order for
|
||
|
|
# best performance.
|
||
|
|
ioctl: 1
|
||
|
|
futex: 1
|
||
|
|
prctl: 1
|
||
|
|
write: 1
|
||
|
|
getpriority: 1
|
||
|
|
mmap2: 1
|
||
|
|
close: 1
|
||
|
|
munmap: 1
|
||
|
|
dup: 1
|
||
|
|
mprotect: 1
|
||
|
|
getuid32: 1
|
||
|
|
setpriority: 1
|
||
|
|
sigaltstack: 1
|
||
|
|
openat: 1
|
||
|
|
open: 1
|
||
|
|
clone: 1
|
||
|
|
read: 1
|
||
|
|
clock_gettime: 1
|
||
|
|
lseek: 1
|
||
|
|
writev: 1
|
||
|
|
fstatat64: 1
|
||
|
|
fstatfs64: 1
|
||
|
|
fstat64: 1
|
||
|
|
restart_syscall: 1
|
||
|
|
exit: 1
|
||
|
|
exit_group: 1
|
||
|
|
rt_sigreturn: 1
|
||
|
|
faccessat: 1
|
||
|
|
madvise: 1
|
||
|
|
brk: 1
|
||
|
|
sched_setscheduler: 1
|
||
|
|
gettid: 1
|
||
|
|
rt_sigprocmask: 1
|
||
|
|
sched_yield: 1
|
||
|
|
ugetrlimit: 1
|
||
|
|
geteuid32: 1
|
||
|
|
getgid32: 1
|
||
|
|
getegid32: 1
|
||
|
|
getgroups32: 1
|
||
|
|
nanosleep: 1
|
||
|
|
getrandom: 1
|
||
|
|
timer_create: 1
|
||
|
|
timer_settime: 1
|
||
|
|
timer_delete: 1
|
||
|
|
|
||
|
|
# for dynamically loading extractors
|
||
|
|
pread64: 1
|
||
|
|
|
||
|
|
# mremap: Ensure |flags| are (MREMAP_MAYMOVE | MREMAP_FIXED) TODO: Once minijail
|
||
|
|
# parser support for '<' is in this needs to be modified to also prevent
|
||
|
|
# |old_address| and |new_address| from touching the exception vector page, which
|
||
|
|
# on ARM is statically loaded at 0xffff 0000. See
|
||
|
|
# http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.ddi0211h/Babfeega.html
|
||
|
|
# for more details.
|
||
|
|
mremap: arg3 == 3 || arg3 == MREMAP_MAYMOVE
|
||
|
|
|
||
|
|
# for FileSource
|
||
|
|
readlinkat: 1
|
||
|
|
_llseek: 1
|
||
|
|
|
||
|
|
@include /apex/com.android.media/etc/seccomp_policy/crash_dump.arm.policy
|
||
|
|
@include /apex/com.android.media/etc/seccomp_policy/code_coverage.arm.policy
|