diff options
Diffstat (limited to 'seccomp/arm/gpu_device.policy')
| -rw-r--r-- | seccomp/arm/gpu_device.policy | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/seccomp/arm/gpu_device.policy b/seccomp/arm/gpu_device.policy index bcd29b6..fd1e4d7 100644 --- a/seccomp/arm/gpu_device.policy +++ b/seccomp/arm/gpu_device.policy @@ -24,7 +24,6 @@ mremap: 1 munmap: 1 nanosleep: 1 open: return ENOENT -openat: return ENOENT pipe2: 1 poll: 1 ppoll: 1 @@ -49,20 +48,21 @@ writev: 1 ## Rules specific to gpu connect: 1 getrandom: 1 -openat: 1 socket: arg0 == 1 && arg1 == 0x80001 && arg2 == 0 _llseek: 1 ftruncate64: 1 stat64: 1 fstat64: 1 +getdents: 1 getdents64: 1 # 0x6400 == DRM_IOCTL_BASE, 0x8000 = KBASE_IOCTL_TYPE (mali) ioctl: arg1 & 0x6400 || arg1 & 0x8000 -## mmap/mprotect/open/openat differ from the common_device.policy +## mmap/mprotect/openat differ from the common_device.policy mmap2: arg2 == PROT_READ|PROT_WRITE || arg2 == PROT_NONE || arg2 == PROT_READ|PROT_EXEC || arg2 == PROT_WRITE || arg2 == PROT_READ mprotect: arg2 == PROT_READ|PROT_WRITE || arg2 == PROT_NONE || arg2 == PROT_READ +openat: 1 ## Rules specific to pvr geteuid32: 1 |