xref: /aosp_15_r20/external/crosvm/jail/seccomp/arm/swap_monitor.policy (revision bb4ee6a4ae7042d18b07a98463b9c8b875e44b39)
1# Copyright 2023 The ChromiumOS Authors
2# Use of this source code is governed by a BSD-style license that can be
3# found in the LICENSE file.
4
5brk: 1
6chdir: 1
7clock_gettime64: 1
8clone: arg0 & CLONE_THREAD
9clone3: 1
10close: 1
11dup3: 1
12dup2: 1
13dup: 1
14epoll_create1: 1
15epoll_ctl: 1
16epoll_wait: 1
17eventfd2: 1
18exit: 1
19exit_group: 1
20fallocate: 1
21fchdir: 1
22fcntl: 1
23fstatat64: 1
24ftruncate64: 1
25futex: 1
26getcwd: 1
27getdents64: 1
28getpid: 1
29gettid: 1
30# 0xc020aa00 = UFFDIO_REGISTER, 0x8010aa01 == UFFDIO_UNREGISTER, 0x8010aa02 == UFFDIO_WAKE, 0xc028aa03 == UFFDIO_COPY, 0xc020aa04 == UFFDIO_ZEROPAGE
31ioctl: arg1 == 0xc020aa00 || arg1 == 0x8010aa01 || arg1 == 0x8010aa02 || arg1 == 0xc028aa03 || arg1 == 0xc020aa04
32_llseek: 1
33madvise: arg2 == MADV_DONTNEED || arg2 == MADV_WILLNEED || arg2 == MADV_DONTDUMP || arg2 == MADV_MERGEABLE || arg2 == MADV_REMOVE
34memfd_create: 1
35mlock2: 1
36mmap2: 1
37mprotect: arg2 in ~PROT_EXEC
38munlock: 1
39munmap: 1
40openat: return ENOENT
41pipe2: 1
42ppoll: 1
43prctl: arg0 == PR_SET_NAME
44pwrite64: 1
45read: 1
46readlinkat: 1
47recvfrom: 1
48recvmsg: 1
49restart_syscall: 1
50rseq: 1
51rt_sigaction: 1
52rt_sigprocmask: 1
53rt_sigreturn: 1
54sched_getaffinity: 1
55sendmsg: 1
56set_robust_list: 1
57sigaltstack: 1
58socket: 1
59statx: 1
60timerfd_create: 1
61timerfd_settime: 1
62timerfd_gettime: 1
63tgkill: arg2 == SIGABRT
64write: 1
65