summary refs log tree commit diff
path: root/seccomp/arm/9s.policy
diff options
context:
space:
mode:
Diffstat (limited to 'seccomp/arm/9s.policy')
-rw-r--r--seccomp/arm/9s.policy64
1 files changed, 0 insertions, 64 deletions
diff --git a/seccomp/arm/9s.policy b/seccomp/arm/9s.policy
deleted file mode 100644
index 5e96803..0000000
--- a/seccomp/arm/9s.policy
+++ /dev/null
@@ -1,64 +0,0 @@
-# Copyright 2018 The Chromium OS Authors. All rights reserved.
-# Use of this source code is governed by a BSD-style license that can be
-# found in the LICENSE file.
-
-read: 1
-write: 1
-stat64: 1
-open: 1
-openat: 1
-close: 1
-fstat64: 1
-lstat64: 1
-getdents64: 1
-ioctl: arg1 == FIOCLEX
-pread64: 1
-pwrite64: 1
-# Disallow mmap with PROT_EXEC set.  The syntax here doesn't allow bit
-# negation, thus the manually negated mask constant.
-mmap2: arg2 in 0xfffffffb
-mprotect: arg2 in 0xfffffffb
-rt_sigaction: 1
-sigaltstack: 1
-munmap: 1
-utimensat: 1
-brk: 1
-uname: 1
-accept4: 1
-mkdir: 1
-sched_getaffinity: 1
-getpid: 1
-ugetrlimit: 1
-set_robust_list: 1
-fcntl64: 1
-socket: arg0 == AF_UNIX || arg0 == AF_VSOCK
-gettimeofday: 1
-restart_syscall: 1
-exit_group: 1
-rt_sigreturn: 1
-rename: 1
-ftruncate64: 1
-connect: 1
-madvise: 1
-rt_sigprocmask: 1
-access: 1
-ARM_set_tls: 1
-_llseek: 1
-exit: 1
-fdatasync: 1
-set_tid_address: 1
-listen: 1
-# Disallow clone's other than new threads.
-clone: arg0 & 0x00010000
-statfs64: 1
-link: 1
-unlink: 1
-fsync: 1
-futex: 1
-bind: 1
-rmdir: 1
-# Calling fchown with -1 as the uid/gid will change the ctime but do nothing else.
-fchown: arg1 == 0xffffffff && arg2 == 0xffffffff
-mremap: 1
-fstatat64: 1
-prlimit64: arg2 == 0 && arg3 != 0