1# Copyright 2018 The Chromium OS Authors. All rights reserved.
2# Use of this source code is governed by a BSD-style license that can be
3# found in the LICENSE file.
4
5brk: 1
6clone: arg0 & CLONE_THREAD
7close: 1
8dup2: 1
9dup: 1
10epoll_create1: 1
11epoll_ctl: 1
12epoll_wait: 1
13eventfd2: 1
14exit: 1
15exit_group: 1
16futex: 1
17getpid: 1
18gettid: 1
19gettimeofday: 1
20kill: 1
21madvise: arg2 == MADV_DONTNEED || arg2 == MADV_DONTDUMP || arg2 == MADV_REMOVE
22mmap: arg2 in ~PROT_EXEC
23mprotect: arg2 in ~PROT_EXEC
24mremap: 1
25munmap: 1
26nanosleep: 1
27pipe2: 1
28poll: 1
29ppoll: 1
30prctl: arg0 == PR_SET_NAME
31read: 1
32readv: 1
33recvfrom: 1
34recvmsg: 1
35restart_syscall: 1
36rt_sigaction: 1
37rt_sigprocmask: 1
38rt_sigreturn: 1
39sched_getaffinity: 1
40sendmsg: 1
41sendto: 1
42set_robust_list: 1
43sigaltstack: 1
44write: 1
45writev: 1
46
47# Used to connect to wayland. arg0 == AF_UNIX && arg1 == SOCK_STREAM|SOCK_CLOEXEC
48socket: arg0 == 1 && arg1 == 0x80001 && arg2 == 0
49# arg1 == FIONBIO || arg1 == DMA_BUF_IOCTL_SYNC
50ioctl: arg1 == 0x5421 || arg1 == 0x40086200
51connect: 1
52# Used for sharing memory with wayland. arg1 == MFD_CLOEXEC|MFD_ALLOW_SEALING
53memfd_create: arg1 == 3
54# Used to set of size new memfd
55ftruncate: 1
56# Used to determine shm size after recvmsg with fd
57lseek: 1
58# Allow F_GETFL only
59fcntl: arg1 == 3
60open: return ENOENT
61openat: return ENOENT
62