sm8250-common: Import seccomp policy

Change-Id: I37ce3ffb096b18e08f994d0dc327456f850e35eb
2021-01-04 22:28:07 +01:00
parent 5a92c56a82
commit 5e1e5980eb
8 changed files with 480 additions and 0 deletions
--- a/seccomp/imsrtp.policy
+++ b/seccomp/imsrtp.policy
@@ -0,0 +1,90 @@
+#Copyright (c) 2020 Qualcomm Technologies, Inc.
+#All Rights Reserved.
+#Confidential and Proprietary - Qualcomm Technologies, Inc
+
+#Not a contribution.
+
+#Copyright (C) 2018 The Android Open Source Project
+
+#"Licensed under the Apache License, Version 2.0 (the \"License\");"
+#you may not use this file except in compliance with the License.
+#You may obtain a copy of the License at
+
+#http://www.apache.org/licenses/LICENSE-2.0
+
+#Unless required by applicable law or agreed to in writing, software
+#"distributed under the License is distributed on an \"AS IS\" BASIS,"
+#WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#See the License for the specific language governing permissions and
+#limitations under the License.
+
+mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+munmap: 1
+mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+#prctl: arg0 == PR_SET_VMA || arg0 == PR_SET_NO_NEW_PRIVS || arg0 == PR_GET_DUMPABLE || arg0 == PR_SET_SECCOMP || arg0 == 0x37 /* PR_??? */
+prctl: 1
+read: 1
+openat: 1
+close: 1
+shutdown: 1
+kill: 1
+futex: 1
+fstat: 1
+gettimeofday: 1
+readlinkat: 1
+newfstatat: 1
+mremap: 1
+pread64: 1
+fstatfs: 1
+rt_sigaction: 1
+faccessat: 1
+socket: arg0 == AF_UNIX || arg0 == AF_QIPCRTR
+writev: 1
+connect: 1
+rt_sigprocmask: 1
+fcntl: 1
+sendto: 1
+getrandom: 1
+lseek: 1
+exit_group: 1
+rt_tgsigqueueinfo: 1
+write: 1
+exit: 1
+getpid: 1
+sigaltstack: 1
+recvmsg: 1
+dup: 1
+getrlimit: 1
+restart_syscall: 1
+clone: 1
+gettid: 1
+sched_getscheduler: 1
+ioctl: 1
+execve: 1
+getuid: 1
+madvise: 1
+set_tid_address: 1
+nanosleep: 1
+rt_sigreturn: 1
+rt_sigsuspend: 1
+setpriority: 1
+geteuid: 1
+getgid: 1
+getegid: 1
+getgroups: 1
+pipe2: 1
+setitimer: 1
+pselect6: 1
+getsockname: 1
+recvfrom: 1
+ppoll: 1
+socketpair: 1
+setsockopt: 1
+getsockopt: 1
+sendmsg: 1
+bind: 1
+timer_create: 1
+timer_settime: 1
+timer_delete: 1
+clock_gettime: 1
+sched_getaffinity: 1