summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--etc/seccomp_policy/gnss@2.0-base.policy24
-rw-r--r--etc/seccomp_policy/gnss@2.0-xtwifi-client.policy28
-rw-r--r--etc/seccomp_policy/gnss@2.0-xtwifi-inet-agent.policy7
3 files changed, 58 insertions, 1 deletions
diff --git a/etc/seccomp_policy/gnss@2.0-base.policy b/etc/seccomp_policy/gnss@2.0-base.policy
index 7b93037..0a2e17b 100644
--- a/etc/seccomp_policy/gnss@2.0-base.policy
+++ b/etc/seccomp_policy/gnss@2.0-base.policy
@@ -93,3 +93,27 @@ sendmsg: 1
sendto: 1
recvfrom: 1
+getsockname: 1
+nanosleep: 1
+clone: 1
+setsockopt: 1
+getsockopt: 1
+madvise: 1
+
+getitimer: 1
+setitimer: 1
+getpid: 1
+bind: 1
+listen: 1
+getpeername: 1
+socketpair: 1
+wait4: 1
+chown: 1
+fchown: 1
+lchown: 1
+umask: 1
+mmap2: 1
+fstat64: 1
+fstatat64: 1
+_llseek: 1
+geteuid: 1
diff --git a/etc/seccomp_policy/gnss@2.0-xtwifi-client.policy b/etc/seccomp_policy/gnss@2.0-xtwifi-client.policy
index 17df31a..232bbe5 100644
--- a/etc/seccomp_policy/gnss@2.0-xtwifi-client.policy
+++ b/etc/seccomp_policy/gnss@2.0-xtwifi-client.policy
@@ -32,7 +32,7 @@
fdatasync: 1
getdents64: 1
gettimeofday: 1
-#ioctl: arg1 == _IOC(_IOC_NONE || arg1 == _IOC(_IOC_READ || arg1 == VSOC_MAYBE_SEND_INTERRUPT_TO_HOST
+ioctl: 1
lseek: 1
madvise: 1
mkdirat: 1
@@ -43,3 +43,29 @@ timerfd_settime: 1
epoll_create1: 1
epoll_pwait: 1
epoll_ctl: 1
+
+sched_getaffinity: 1
+gettid: 1
+fchown: 1
+fchmod: 1
+fchmodat: 1
+getsockopt: 1
+fchownat: 1
+fstat: 1
+fstatfs: 1
+newfstatat: 1
+sendmsg: 1
+recvmsg: 1
+gettimeofday: 1
+setsockopt: 1
+rt_tgsigqueueinfo: 1
+ioctl: 1
+mmap: 1
+getuid32: 1
+getuid: 1
+fstat64: 1
+fstatat64: 1
+mkdir: 1
+rmdir: 1
+creat: 1
+chmod: 1
diff --git a/etc/seccomp_policy/gnss@2.0-xtwifi-inet-agent.policy b/etc/seccomp_policy/gnss@2.0-xtwifi-inet-agent.policy
index 00df6c7..6b8a274 100644
--- a/etc/seccomp_policy/gnss@2.0-xtwifi-inet-agent.policy
+++ b/etc/seccomp_policy/gnss@2.0-xtwifi-inet-agent.policy
@@ -31,3 +31,10 @@
unlinkat: 1
sched_getaffinity: 1
+newfstatat: 1
+fchmodat: 1
+madvise: 1
+getuid: 1
+getuid32: 1
+fstat64: 1
+fstatat64: 1