diff options
-rw-r--r-- | etc/seccomp_policy/gnss@2.0-base.policy | 24 | ||||
-rw-r--r-- | etc/seccomp_policy/gnss@2.0-xtwifi-client.policy | 28 | ||||
-rw-r--r-- | etc/seccomp_policy/gnss@2.0-xtwifi-inet-agent.policy | 7 |
3 files changed, 58 insertions, 1 deletions
diff --git a/etc/seccomp_policy/gnss@2.0-base.policy b/etc/seccomp_policy/gnss@2.0-base.policy index 7b93037..0a2e17b 100644 --- a/etc/seccomp_policy/gnss@2.0-base.policy +++ b/etc/seccomp_policy/gnss@2.0-base.policy @@ -93,3 +93,27 @@ sendmsg: 1 sendto: 1 recvfrom: 1 +getsockname: 1 +nanosleep: 1 +clone: 1 +setsockopt: 1 +getsockopt: 1 +madvise: 1 + +getitimer: 1 +setitimer: 1 +getpid: 1 +bind: 1 +listen: 1 +getpeername: 1 +socketpair: 1 +wait4: 1 +chown: 1 +fchown: 1 +lchown: 1 +umask: 1 +mmap2: 1 +fstat64: 1 +fstatat64: 1 +_llseek: 1 +geteuid: 1 diff --git a/etc/seccomp_policy/gnss@2.0-xtwifi-client.policy b/etc/seccomp_policy/gnss@2.0-xtwifi-client.policy index 17df31a..232bbe5 100644 --- a/etc/seccomp_policy/gnss@2.0-xtwifi-client.policy +++ b/etc/seccomp_policy/gnss@2.0-xtwifi-client.policy @@ -32,7 +32,7 @@ fdatasync: 1 getdents64: 1 gettimeofday: 1 -#ioctl: arg1 == _IOC(_IOC_NONE || arg1 == _IOC(_IOC_READ || arg1 == VSOC_MAYBE_SEND_INTERRUPT_TO_HOST +ioctl: 1 lseek: 1 madvise: 1 mkdirat: 1 @@ -43,3 +43,29 @@ timerfd_settime: 1 epoll_create1: 1 epoll_pwait: 1 epoll_ctl: 1 + +sched_getaffinity: 1 +gettid: 1 +fchown: 1 +fchmod: 1 +fchmodat: 1 +getsockopt: 1 +fchownat: 1 +fstat: 1 +fstatfs: 1 +newfstatat: 1 +sendmsg: 1 +recvmsg: 1 +gettimeofday: 1 +setsockopt: 1 +rt_tgsigqueueinfo: 1 +ioctl: 1 +mmap: 1 +getuid32: 1 +getuid: 1 +fstat64: 1 +fstatat64: 1 +mkdir: 1 +rmdir: 1 +creat: 1 +chmod: 1 diff --git a/etc/seccomp_policy/gnss@2.0-xtwifi-inet-agent.policy b/etc/seccomp_policy/gnss@2.0-xtwifi-inet-agent.policy index 00df6c7..6b8a274 100644 --- a/etc/seccomp_policy/gnss@2.0-xtwifi-inet-agent.policy +++ b/etc/seccomp_policy/gnss@2.0-xtwifi-inet-agent.policy @@ -31,3 +31,10 @@ unlinkat: 1 sched_getaffinity: 1 +newfstatat: 1 +fchmodat: 1 +madvise: 1 +getuid: 1 +getuid32: 1 +fstat64: 1 +fstatat64: 1 |