Home | History | Annotate | Download | only in seccomp_policy
      1 # Organized by frequency of systemcall - in descending order for
      2 # best performance.
      3 futex: 1
      4 ioctl: 1
      5 write: 1
      6 prctl: 1
      7 clock_gettime: 1
      8 getpriority: 1
      9 read: 1
     10 close: 1
     11 writev: 1
     12 dup: 1
     13 ppoll: 1
     14 mmap2: 1
     15 
     16 # mremap: Ensure |flags| are (MREMAP_MAYMOVE | MREMAP_FIXED) TODO: Once minijail
     17 # parser support for '<' is in this needs to be modified to also prevent
     18 # |old_address| and |new_address| from touching the exception vector page, which
     19 # on ARM is statically loaded at 0xffff 0000. See
     20 # http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.ddi0211h/Babfeega.html
     21 # for more details.
     22 mremap: arg3 == 3
     23 munmap: 1
     24 mprotect: 1
     25 madvise: 1
     26 openat: 1
     27 sigaltstack: 1
     28 clone: 1
     29 setpriority: 1
     30 getuid32: 1
     31 fstat64: 1
     32 fstatfs64: 1
     33 pread64: 1
     34 faccessat: 1
     35 readlinkat: 1
     36 exit: 1
     37 rt_sigprocmask: 1
     38 set_tid_address: 1
     39 restart_syscall: 1
     40 exit_group: 1
     41 rt_sigreturn: 1
     42 pipe2: 1
     43 gettimeofday: 1
     44 sched_yield: 1
     45 nanosleep: 1
     46 lseek: 1
     47 _llseek: 1
     48 sched_get_priority_max: 1
     49 sched_get_priority_min: 1
     50 statfs64: 1
     51 sched_setscheduler: 1
     52 fstatat64: 1
     53 ugetrlimit: 1
     54 getdents64: 1
     55 
     56 # for attaching to debuggerd on process crash
     57 sigaction: 1
     58 tgkill: 1
     59 socket: 1
     60 connect: 1
     61 fcntl64: 1
     62 rt_tgsigqueueinfo: 1
     63 geteuid32: 1
     64 getgid32: 1
     65 getegid32: 1
     66 getgroups32: 1
     67 recvmsg: 1
     68 getpid: 1
     69 gettid: 1
     70