aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChen Guoyin <chenguoyin.cgy@linux.alibaba.com>2022-11-02 02:41:48 +0000
committerAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>2022-11-02 02:41:48 +0000
commit41342ff74e4a18c89e502cace00f5d839e103c26 (patch)
tree69435179e0c016bd0f85230a624a3e6cad54a4f6
parent02029bfe8da6fe8131ac170f113aa60ea420e398 (diff)
parentf9b5669b50be9b1d495dfa2eafdab3342dbe917a (diff)
downloadnvram-41342ff74e4a18c89e502cace00f5d839e103c26.tar.gz
Add seccomp policy for riscv64 am: 2a488320af am: f9b5669b50android-u-beta-1-gpl
Original change: https://android-review.googlesource.com/c/platform/system/nvram/+/2252033 Change-Id: I4718ce8e63e1e955200a6b37a911db4f270d6e0c Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
-rw-r--r--hal/Android.bp3
-rw-r--r--hal/fake-nvram-seccomp-riscv64.policy47
2 files changed, 50 insertions, 0 deletions
diff --git a/hal/Android.bp b/hal/Android.bp
index baae6fd..c21e34a 100644
--- a/hal/Android.bp
+++ b/hal/Android.bp
@@ -97,6 +97,9 @@ prebuilt_usr_share {
arm64: {
src: "fake-nvram-seccomp-arm64.policy",
},
+ riscv64: {
+ src: "fake-nvram-seccomp-riscv64.policy",
+ },
x86: {
src: "fake-nvram-seccomp-x86.policy",
},
diff --git a/hal/fake-nvram-seccomp-riscv64.policy b/hal/fake-nvram-seccomp-riscv64.policy
new file mode 100644
index 0000000..3de4bb4
--- /dev/null
+++ b/hal/fake-nvram-seccomp-riscv64.policy
@@ -0,0 +1,47 @@
+#
+# Copyright (C) 2016 The Android Open Source Project
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+# Control socket operation.
+accept4: 1
+getsockopt: 1
+ppoll: 1
+
+# File operations.
+fdatasync: 1
+fstat: 1
+fsync: 1
+openat: 1
+renameat: 1
+unlinkat: 1
+
+# File and socket I/O.
+close: 1
+read: 1
+write: 1
+
+# Logging.
+clock_gettime: 1
+connect: 1
+fcntl: 1
+getuid: 1
+socket: 1
+writev: 1
+
+# Memory allocation.
+brk: 1
+mmap: 1
+munmap: 1
+madvise: 1