1 # Organized by frequency of systemcall - in descending order for 2 # best performance. 3 ioctl: 1 4 futex: 1 5 prctl: 1 6 write: 1 7 getpriority: 1 8 close: 1 9 dup: 1 10 munmap: 1 11 mmap: 1 12 madvise: 1 13 openat: 1 14 open: 1 15 clock_gettime: 1 16 writev: 1 17 brk: 1 18 mprotect: 1 19 read: 1 20 lseek: 1 21 clone: 1 22 getuid: 1 23 setpriority: 1 24 sigaltstack: 1 25 fstat: 1 26 fstatfs: 1 27 newfstatat: 1 28 restart_syscall: 1 29 exit: 1 30 exit_group: 1 31 rt_sigreturn: 1 32 faccessat: 1 33 sched_setscheduler: 1 34 getrlimit: 1 35 nanosleep: 1 36 getrandom: 1 37 38 # for dynamically loading extractors 39 getdents64: 1 40 readlinkat: 1 41 pread64: 1 42 mremap: 1 43 44 # for FileSource 45 readlinkat: 1 46 47 # Required by AddressSanitizer 48 gettid: 1 49 sched_yield: 1 50 getpid: 1 51 gettid: 1 52 53 @include /system/etc/seccomp_policy/crash_dump.x86_64.policy 54