[email protected] 3.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119
  1. #*******************************************************************************
  2. # Copyright (c) 2020 The Linux Foundation. All rights reserved.
  3. #
  4. # Redistribution and use in source and binary forms, with or without
  5. # modification, are permitted provided that the following conditions are
  6. # met:
  7. # * Redistributions of source code must retain the above copyright
  8. # notice, this list of conditions and the following disclaimer.
  9. # * Redistributions in binary form must reproduce the above
  10. # copyright notice, this list of conditions and the following
  11. # disclaimer in the documentation and/or other materials provided
  12. # with the distribution.
  13. # * Neither the name of The Linux Foundation, nor the names of its
  14. # contributors may be used to endorse or promote products derived
  15. # from this software without specific prior written permission.
  16. #
  17. # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
  18. # WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
  19. # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
  20. # ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
  21. # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  22. # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  23. # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
  24. # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
  25. # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
  26. # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
  27. # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  28. #
  29. #******************************************************************************
  30. clone: 1
  31. close: 1
  32. connect: 1
  33. execve: 1
  34. exit_group: 1
  35. exit: 1
  36. faccessat: 1
  37. fcntl: 1
  38. fstat: 1
  39. fstatfs: 1
  40. futex: 1
  41. getpid: 1
  42. getuid: 1
  43. getgid: 1
  44. getegid: 1
  45. getgroups: 1
  46. geteuid: 1
  47. umask: 1
  48. getrandom: 1
  49. mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
  50. mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
  51. mremap: 1
  52. munmap: 1
  53. newfstatat: 1
  54. openat: 1
  55. #prctl: arg0 == PR_SET_VMA || arg0 == PR_SET_NO_NEW_PRIVS || arg0 == PR_GET_DUMPABLE || arg0 == PR_SET_SECCOMP || arg0 == 0x37 /* PR_??? */
  56. prctl: 1
  57. pread64: 1
  58. read: 1
  59. pwrite64: 1
  60. write: 1
  61. writev: 1
  62. readlinkat: 1
  63. restart_syscall: 1
  64. rt_sigaction: 1
  65. rt_sigprocmask: 1
  66. rt_sigreturn: 1
  67. sched_getscheduler: 1
  68. set_tid_address: 1
  69. sigaltstack: 1
  70. unlinkat: 1
  71. lseek: 1
  72. ##ioctl: arg1 == _IOC(_IOC_NONE || arg1 == _IOC(_IOC_READ || arg1 == VSOC_MAYBE_SEND_INTERRUPT_TO_HOST
  73. ioctl: 1
  74. clock_gettime: 1
  75. socket: arg0 == AF_INET6 || arg0 == AF_UNIX || arg0 == AF_QIPCRTR
  76. connect: 1
  77. setsockopt: 1
  78. getsockname: 1
  79. socketpair: 1
  80. ppoll: 1
  81. pselect6: 1
  82. accept4: 1
  83. listen: 1
  84. bind: 1
  85. pipe2: 1
  86. recvmsg: 1
  87. sendmsg: 1
  88. sendto: 1
  89. recvfrom: 1
  90. getsockname: 1
  91. nanosleep: 1
  92. clone: 1
  93. setsockopt: 1
  94. getsockopt: 1
  95. madvise: 1
  96. getitimer: 1
  97. setitimer: 1
  98. getpid: 1
  99. bind: 1
  100. listen: 1
  101. getpeername: 1
  102. socketpair: 1
  103. wait4: 1
  104. chown: 1
  105. fchown: 1
  106. lchown: 1
  107. umask: 1
  108. mmap2: 1
  109. fstat64: 1
  110. fstatat64: 1
  111. _llseek: 1
  112. geteuid: 1