xref: /aosp_15_r20/bionic/libc/SECCOMP_ALLOWLIST_APP.TXT (revision 8d67ca893c1523eb926b9080dbe4e2ffd2a27ba1)
1*8d67ca89SAndroid Build Coastguard Worker# This file is used to populate seccomp's allowlist policy in combination with SYSCALLS.TXT.
2*8d67ca89SAndroid Build Coastguard Worker# Note that the resultant policy is applied only to zygote spawned processes.
3*8d67ca89SAndroid Build Coastguard Worker#
4*8d67ca89SAndroid Build Coastguard Worker# This file is processed by a python script named genseccomp.py.
5*8d67ca89SAndroid Build Coastguard Worker
6*8d67ca89SAndroid Build Coastguard Worker# Needed for debugging 32-bit Chrome
7*8d67ca89SAndroid Build Coastguard Workerint	pipe(int pipefd[2])	lp32
8*8d67ca89SAndroid Build Coastguard Worker
9*8d67ca89SAndroid Build Coastguard Worker# b/34651972
10*8d67ca89SAndroid Build Coastguard Workerint	access(const char *pathname, int mode)	lp32
11*8d67ca89SAndroid Build Coastguard Workerint	stat64(const char*, struct stat64*)	lp32
12*8d67ca89SAndroid Build Coastguard Worker
13*8d67ca89SAndroid Build Coastguard Worker# b/34813887
14*8d67ca89SAndroid Build Coastguard Workerint	open(const char *path, int oflag, ... ) lp32,x86_64
15*8d67ca89SAndroid Build Coastguard Workerint	getdents(unsigned int fd, struct linux_dirent *dirp, unsigned int count) lp32,x86_64
16*8d67ca89SAndroid Build Coastguard Worker
17*8d67ca89SAndroid Build Coastguard Worker# b/34719286
18*8d67ca89SAndroid Build Coastguard Workerint	eventfd(unsigned int initval, int flags)	lp32
19*8d67ca89SAndroid Build Coastguard Worker
20*8d67ca89SAndroid Build Coastguard Worker# b/34817266
21*8d67ca89SAndroid Build Coastguard Workerint	epoll_wait(int epfd, struct epoll_event *events, int maxevents, int timeout)	lp32
22*8d67ca89SAndroid Build Coastguard Worker
23*8d67ca89SAndroid Build Coastguard Worker# b/34908783
24*8d67ca89SAndroid Build Coastguard Workerint	epoll_create(int size)	lp32
25*8d67ca89SAndroid Build Coastguard Worker
26*8d67ca89SAndroid Build Coastguard Worker# b/34979910
27*8d67ca89SAndroid Build Coastguard Workerint	creat(const char *pathname, mode_t mode)	lp32
28*8d67ca89SAndroid Build Coastguard Workerint	unlink(const char *pathname)	lp32
29*8d67ca89SAndroid Build Coastguard Worker
30*8d67ca89SAndroid Build Coastguard Worker# b/35059702
31*8d67ca89SAndroid Build Coastguard Workerint	lstat64(const char*, struct stat64*)	lp32
32*8d67ca89SAndroid Build Coastguard Worker
33*8d67ca89SAndroid Build Coastguard Worker# b/35217603
34*8d67ca89SAndroid Build Coastguard Workerint	fcntl(int fd, int cmd, ... /* arg */ )	lp32
35*8d67ca89SAndroid Build Coastguard Workerpid_t	fork()	lp32
36*8d67ca89SAndroid Build Coastguard Workerint	poll(struct pollfd *fds, nfds_t nfds, int timeout)	lp32
37*8d67ca89SAndroid Build Coastguard Worker
38*8d67ca89SAndroid Build Coastguard Worker# b/35906875
39*8d67ca89SAndroid Build Coastguard Workerint	inotify_init()	lp32
40*8d67ca89SAndroid Build Coastguard Workeruid_t	getuid()	lp32
41*8d67ca89SAndroid Build Coastguard Worker
42*8d67ca89SAndroid Build Coastguard Worker# b/36435222
43*8d67ca89SAndroid Build Coastguard Workerint	remap_file_pages(void *addr, size_t size, int prot, size_t pgoff, int flags)	lp32
44*8d67ca89SAndroid Build Coastguard Worker
45*8d67ca89SAndroid Build Coastguard Worker# b/36449658
46*8d67ca89SAndroid Build Coastguard Workerint	rename(const char *oldpath, const char *newpath)	lp32
47*8d67ca89SAndroid Build Coastguard Worker
48*8d67ca89SAndroid Build Coastguard Worker# b/36726183. Note arm does not support mmap
49*8d67ca89SAndroid Build Coastguard Workervoid*	mmap(void *addr, size_t length, int prot, int flags, int fd, off_t offset)	x86
50*8d67ca89SAndroid Build Coastguard Worker
51*8d67ca89SAndroid Build Coastguard Worker# b/37769298
52*8d67ca89SAndroid Build Coastguard Workerint dup2(int oldfd, int newfd)	lp32
53*8d67ca89SAndroid Build Coastguard Worker
54*8d67ca89SAndroid Build Coastguard Worker# b/62779795
55*8d67ca89SAndroid Build Coastguard Workerint compat_select:_newselect(int n, unsigned long* inp, unsigned long* outp, unsigned long* exp, struct timeval* timeout) lp32
56*8d67ca89SAndroid Build Coastguard Worker
57*8d67ca89SAndroid Build Coastguard Worker# b/62090571
58*8d67ca89SAndroid Build Coastguard Workerint mkdir(const char *pathname, mode_t mode)	lp32
59*8d67ca89SAndroid Build Coastguard Worker
60*8d67ca89SAndroid Build Coastguard Worker# Not used by bionic in U because riscv64 doesn't have it, but still
61*8d67ca89SAndroid Build Coastguard Worker# used by legacy apps (http://b/254179267).
62*8d67ca89SAndroid Build Coastguard Workerint renameat(int, const char*, int, const char*)  arm,x86,arm64,x86_64
63