Spacewar: Initial import

proprietary/vendor/etc/seccomp_policy/atfwd@2.0.policy

@@ -0,0 +1,67 @@
+# Copyright (c) 2020 Qualcomm Technologies, Inc.
+# All Rights Reserved.
+# Confidential and Proprietary - Qualcomm Technologies, Inc
+#
+# Not a contribution.
+#
+# Copyright (C) 2018 The Android Open Source Project
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+munmap: 1
+getuid: 1
+writev: 1
+prctl: arg0 == PR_SET_VMA || arg0 == PR_GET_DUMPABLE
+mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+openat: 1
+futex: 1
+close: 1
+read: 1
+newfstatat: 1
+fstat: 1
+#ioctl: arg1 == BINDER_WRITE_READ || arg1 == BINDER_SET_MAX_THREADS || arg1 == BINDER_VERSION
+ioctl: 1
+mremap: 1
+readlinkat: 1
+pread64: 1
+fstatfs: 1
+rt_sigprocmask: 1
+faccessat: 1
+sendto: 1
+rt_sigaction: 1
+socket: arg0 == AF_UNIX || arg0 == AF_QIPCRTR
+recvfrom: 1
+getsockname: 1
+getdents64: 1
+fcntl: 1
+nanosleep: 1
+getrandom: 1
+clone: 1
+pipe2: 1
+exit_group: 1
+write: 1
+exit: 1
+getpid: 1
+sigaltstack: 1
+getrlimit: 1
+restart_syscall: 1
+setsockopt: 1
+sched_getscheduler: 1
+rt_sigreturn: 1
+execve: 1
+madvise: 1
+set_tid_address: 1
+connect: 1
+ppoll: 1
+clock_gettime: 1

proprietary/vendor/etc/seccomp_policy/codec2.vendor.base-arm.policy

@@ -0,0 +1,89 @@
+################################################################################################### 
+# Copyright (c) 2020 Qualcomm Technologies, Inc.
+# All Rights Reserved.
+# Confidential and Proprietary - Qualcomm Technologies, Inc.
+###################################################################################################
+#
+# Not a Contribution.
+#
+
+# Copyright (C) 2019 The Android Open Source Project
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+futex: 1
+# ioctl calls are filtered via the selinux policy.
+ioctl: 1
+sched_yield: 1
+close: 1
+dup: 1
+ppoll: 1
+mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+mmap2: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+memfd_create: 1
+ftruncate: 1
+ftruncate64: 1
+
+mremap: arg3 == 3 || arg3 == MREMAP_MAYMOVE
+munmap: 1
+prctl: 1
+getuid32: 1
+writev: 1
+sigaltstack: 1
+clone: 1
+exit: 1
+lseek: 1
+rt_sigprocmask: 1
+openat: 1
+open: 1
+fstat64: 1
+write: 1
+nanosleep: 1
+setpriority: 1
+set_tid_address: 1
+getdents64: 1
+readlinkat: 1
+readlink: 1
+read: 1
+pread64: 1
+fstatfs64: 1
+gettimeofday: 1
+faccessat: 1
+_llseek: 1
+fstatat64: 1
+ugetrlimit: 1
+exit_group: 1
+restart_syscall: 1
+rt_sigreturn: 1
+getrandom: 1
+madvise: 1
+
+# crash dump policy additions
+sigreturn: 1
+clock_gettime: 1
+futex: 1
+getpid: 1
+gettid: 1
+pipe2: 1
+recvmsg: 1
+process_vm_readv: 1
+tgkill: 1
+rt_sigaction: 1
+rt_tgsigqueueinfo: 1
+#prctl: arg0 == PR_GET_NO_NEW_PRIVS || arg0 == 0x53564d41
+#mprotect: arg2 in 0x1|0x2
+#mmap2: arg2 in 0x1|0x2
+geteuid32: 1
+getgid32: 1
+getegid32: 1
+getgroups32: 1

proprietary/vendor/etc/seccomp_policy/codec2.vendor.ext-arm.policy

@@ -0,0 +1,13 @@
+#Copyright (c) 2019-2020 Qualcomm Technologies, Inc.
+#All Rights Reserved.
+#Confidential and Proprietary - Qualcomm Technologies, Inc.
+
+# device specific syscalls
+pselect6: 1
+eventfd2: 1
+sendto: 1
+recvfrom: 1
+_llseek: 1
+sysinfo: 1
+getcwd: 1
+getdents64: 1

proprietary/vendor/etc/seccomp_policy/gnss@2.0-base.policy

@@ -0,0 +1,119 @@
+#*******************************************************************************
+#  Copyright (c) 2020 The Linux Foundation. All rights reserved.
+#
+#  Redistribution and use in source and binary forms, with or without
+#  modification, are permitted provided that the following conditions are
+#  met:
+#      * Redistributions of source code must retain the above copyright
+#        notice, this list of conditions and the following disclaimer.
+#      * Redistributions in binary form must reproduce the above
+#        copyright notice, this list of conditions and the following
+#        disclaimer in the documentation and/or other materials provided
+#        with the distribution.
+#      * Neither the name of The Linux Foundation, nor the names of its
+#        contributors may be used to endorse or promote products derived
+#        from this software without specific prior written permission.
+#
+#  THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
+#  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+#  MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
+#  ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
+#  BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+#  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+#  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
+#  BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+#  WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+#  OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
+#  IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+#
+#******************************************************************************
+
+clone: 1
+close: 1
+connect: 1
+execve: 1
+exit_group: 1
+exit: 1
+faccessat: 1
+fcntl: 1
+fstat: 1
+fstatfs: 1
+futex: 1
+getpid: 1
+getuid: 1
+getgid: 1
+getegid: 1
+getgroups: 1
+geteuid: 1
+umask: 1
+getrandom: 1
+mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+mremap: 1
+munmap: 1
+newfstatat: 1
+openat: 1
+#prctl: arg0 == PR_SET_VMA || arg0 == PR_SET_NO_NEW_PRIVS || arg0 == PR_GET_DUMPABLE || arg0 == PR_SET_SECCOMP || arg0 == 0x37 /* PR_??? */
+prctl: 1
+pread64: 1
+read: 1
+pwrite64: 1
+write: 1
+writev: 1
+readlinkat: 1
+restart_syscall: 1
+rt_sigaction: 1
+rt_sigprocmask: 1
+rt_sigreturn: 1
+sched_getscheduler: 1
+set_tid_address: 1
+sigaltstack: 1
+unlinkat: 1
+lseek: 1
+##ioctl: arg1 == _IOC(_IOC_NONE || arg1 == _IOC(_IOC_READ || arg1 == VSOC_MAYBE_SEND_INTERRUPT_TO_HOST
+ioctl: 1
+clock_gettime: 1
+
+
+socket: arg0 == AF_INET6 || arg0 == AF_UNIX || arg0 == AF_QIPCRTR
+connect: 1
+setsockopt: 1
+getsockname: 1
+socketpair: 1
+ppoll: 1
+pselect6: 1
+accept4: 1
+listen: 1
+bind: 1
+pipe2: 1
+
+recvmsg: 1
+sendmsg: 1
+
+sendto: 1
+recvfrom: 1
+
+getsockname: 1
+nanosleep: 1
+clone: 1
+setsockopt: 1
+getsockopt: 1
+madvise: 1
+
+getitimer: 1
+setitimer: 1
+getpid: 1
+bind: 1
+listen: 1
+getpeername: 1
+socketpair: 1
+wait4: 1
+chown: 1
+fchown: 1
+lchown: 1
+umask: 1
+mmap2: 1
+fstat64: 1
+fstatat64: 1
+_llseek: 1
+geteuid: 1

proprietary/vendor/etc/seccomp_policy/gnss@2.0-xtra-daemon.policy

@@ -0,0 +1,48 @@
+#*******************************************************************************
+#  Copyright (c) 2020 The Linux Foundation. All rights reserved.
+#
+#  Redistribution and use in source and binary forms, with or without
+#  modification, are permitted provided that the following conditions are
+#  met:
+#      * Redistributions of source code must retain the above copyright
+#        notice, this list of conditions and the following disclaimer.
+#      * Redistributions in binary form must reproduce the above
+#        copyright notice, this list of conditions and the following
+#        disclaimer in the documentation and/or other materials provided
+#        with the distribution.
+#      * Neither the name of The Linux Foundation, nor the names of its
+#        contributors may be used to endorse or promote products derived
+#        from this software without specific prior written permission.
+#
+#  THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
+#  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+#  MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
+#  ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
+#  BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+#  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+#  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
+#  BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+#  WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+#  OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
+#  IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+#
+#******************************************************************************
+bind: 1
+getrlimit: 1
+
+pipe2: 1
+
+sched_getaffinity: 1
+timerfd_create: 1
+unlinkat: 1
+setpriority: 1
+
+epoll_create1: 1
+epoll_ctl: 1
+epoll_pwait: 1
+timerfd_settime: 1
+
+fdatasync: 1
+madvise: 1
+ftruncate: 1
+

proprietary/vendor/etc/seccomp_policy/gnss@2.0-xtwifi-client.policy

@@ -0,0 +1,73 @@
+
+#*******************************************************************************
+#  Copyright (c) 2020 The Linux Foundation. All rights reserved.
+#
+#  Redistribution and use in source and binary forms, with or without
+#  modification, are permitted provided that the following conditions are
+#  met:
+#      * Redistributions of source code must retain the above copyright
+#        notice, this list of conditions and the following disclaimer.
+#      * Redistributions in binary form must reproduce the above
+#        copyright notice, this list of conditions and the following
+#        disclaimer in the documentation and/or other materials provided
+#        with the distribution.
+#      * Neither the name of The Linux Foundation, nor the names of its
+#        contributors may be used to endorse or promote products derived
+#        from this software without specific prior written permission.
+#
+#  THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
+#  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+#  MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
+#  ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
+#  BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+#  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+#  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
+#  BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+#  WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+#  OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
+#  IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+#
+#******************************************************************************
+
+fdatasync: 1
+getdents64: 1
+gettimeofday: 1
+ioctl: 1
+lseek: 1
+madvise: 1
+mkdirat: 1
+pwrite64: 1
+
+timerfd_create: 1
+timerfd_settime: 1
+epoll_create1: 1
+epoll_pwait: 1
+epoll_ctl: 1
+
+sched_getaffinity: 1
+gettid: 1
+fchown: 1
+fchmod: 1
+fchmodat: 1
+getsockopt: 1
+fchownat: 1
+fstat: 1
+fstatfs: 1
+newfstatat: 1
+sendmsg: 1
+recvmsg: 1
+gettimeofday: 1
+setsockopt: 1
+rt_tgsigqueueinfo: 1
+ioctl: 1
+mmap: 1
+getuid32: 1
+getuid: 1
+fstat64: 1
+fstatat64: 1
+mkdir: 1
+rmdir: 1
+creat: 1
+chmod: 1
+lseek: 1
+geteuid32: 1

proprietary/vendor/etc/seccomp_policy/gnss@2.0-xtwifi-inet-agent.policy

@@ -0,0 +1,43 @@
+
+#*******************************************************************************
+#  Copyright (c) 2020 The Linux Foundation. All rights reserved.
+#
+#  Redistribution and use in source and binary forms, with or without
+#  modification, are permitted provided that the following conditions are
+#  met:
+#      * Redistributions of source code must retain the above copyright
+#        notice, this list of conditions and the following disclaimer.
+#      * Redistributions in binary form must reproduce the above
+#        copyright notice, this list of conditions and the following
+#        disclaimer in the documentation and/or other materials provided
+#        with the distribution.
+#      * Neither the name of The Linux Foundation, nor the names of its
+#        contributors may be used to endorse or promote products derived
+#        from this software without specific prior written permission.
+#
+#  THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
+#  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+#  MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
+#  ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
+#  BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+#  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+#  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
+#  BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+#  WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+#  OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
+#  IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+#
+#******************************************************************************
+
+unlinkat: 1
+sched_getaffinity: 1
+newfstatat: 1
+fchmodat: 1
+madvise: 1
+mmap: 1
+getuid: 1
+getuid32: 1
+fstat64: 1
+fstatat64: 1
+gettimeofday: 1
+getdents64: 1

proprietary/vendor/etc/seccomp_policy/imsrtp.policy

@@ -0,0 +1,95 @@
+#Copyright (c) 2020 Qualcomm Technologies, Inc.
+#All Rights Reserved.
+#Confidential and Proprietary - Qualcomm Technologies, Inc
+
+#Not a contribution.
+
+#Copyright (C) 2018 The Android Open Source Project
+
+#"Licensed under the Apache License, Version 2.0 (the \"License\");"
+#you may not use this file except in compliance with the License.
+#You may obtain a copy of the License at
+
+#http://www.apache.org/licenses/LICENSE-2.0
+
+#Unless required by applicable law or agreed to in writing, software
+#"distributed under the License is distributed on an \"AS IS\" BASIS,"
+#WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#See the License for the specific language governing permissions and
+#limitations under the License.
+
+mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+munmap: 1
+mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+#prctl: arg0 == PR_SET_VMA || arg0 == PR_SET_NO_NEW_PRIVS || arg0 == PR_GET_DUMPABLE || arg0 == PR_SET_SECCOMP || arg0 == 0x37 /* PR_??? */
+prctl: 1
+read: 1
+openat: 1
+close: 1
+shutdown: 1
+kill: 1
+futex: 1
+fstat: 1
+gettimeofday: 1
+readlinkat: 1
+newfstatat: 1
+mremap: 1
+pread64: 1
+fstatfs: 1
+rt_sigaction: 1
+faccessat: 1
+socket: arg0 == AF_UNIX || arg0 == AF_QIPCRTR
+writev: 1
+connect: 1
+rt_sigprocmask: 1
+fcntl: 1
+sendto: 1
+getrandom: 1
+lseek: 1
+exit_group: 1
+rt_tgsigqueueinfo: 1
+write: 1
+exit: 1
+getpid: 1
+sigaltstack: 1
+recvmsg: 1
+dup: 1
+getrlimit: 1
+restart_syscall: 1
+clone: 1
+gettid: 1
+sched_getscheduler: 1
+ioctl: 1
+execve: 1
+getuid: 1
+madvise: 1
+set_tid_address: 1
+nanosleep: 1
+rt_sigreturn: 1
+rt_sigsuspend: 1
+setpriority: 1
+geteuid: 1
+getgid: 1
+getegid: 1
+getgroups: 1
+pipe2: 1
+setitimer: 1
+pselect6: 1
+getsockname: 1
+recvfrom: 1
+ppoll: 1
+socketpair: 1
+setsockopt: 1
+getsockopt: 1
+sendmsg: 1
+bind: 1
+timer_create: 1
+timer_settime: 1
+timer_delete: 1
+clock_gettime: 1
+sched_getaffinity: 1
+#crash dump policy addition
+socket: 1
+process_vm_readv: 1
+tgkill: 1
+sigreturn: 1

proprietary/vendor/etc/seccomp_policy/qcrilnr@2.0.policy

@@ -0,0 +1,105 @@
+# Copyright (c) 2020 Qualcomm Technologies, Inc.
+# All Rights Reserved.
+# Confidential and Proprietary - Qualcomm Technologies, Inc
+#
+# Not a contribution.
+#
+# Copyright (C) 2018 The Android Open Source Project
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+gettid: 1
+prctl: arg0 == PR_SET_VMA || arg0 == PR_SET_NAME || arg0 == PR_GET_DUMPABLE || arg0 == PR_GET_NAME || arg0 == PR_SET_TIMERSLACK || arg0 == 0x37 || arg0 == PR_GET_NO_NEW_PRIVS || arg0 == PR_SET_DUMPABLE || arg0 == PR_SET_PTRACER || arg0 == PR_CAP_AMBIENT
+write: 1
+read: 1
+close: 1
+openat: 1
+futex: 1
+rt_sigprocmask: 1
+#ioctl: arg1 == _IOC(_IOC_NONE || arg1 == _IOC(_IOC_READ || arg1 == TCGETS || arg1 == BINDER_WRITE_READ || arg1 == SIOCGIFNAME || arg1 == BINDER_THREAD_EXIT || arg1 == VSOC_MAYBE_SEND_INTERRUPT_TO_HOST || arg1 == BINDER_SET_MAX_THREADS || arg1 == BINDER_VERSION
+ioctl : 1
+recvfrom: 1
+ppoll: 1
+fcntl: 1
+sendto: 1
+madvise: 1
+pselect6: 1
+mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+munmap: 1
+newfstatat: 1
+sigaltstack: 1
+fstat: 1
+pread64: 1
+socket: arg0 == AF_UNIX || arg0 == AF_INET || arg0 == AF_QIPCRTR || arg0 == AF_NETLINK
+getuid: 1
+clone: 1
+getsockname: 1
+exit: 1
+writev: 1
+connect: 1
+setsockopt: 1
+set_tid_address: 1
+pipe2: 1
+recvmsg: 1
+nanosleep: 1
+lseek: 1
+mremap: 1
+readlinkat: 1
+fstatfs: 1
+pwrite64: 1
+rt_sigtimedwait: 1
+tgkill: 1
+timer_delete: 1
+bind: 1
+timer_settime: 1
+timer_create: 1
+faccessat: 1
+getdents64: 1
+rt_sigaction: 1
+clock_gettime: 1
+fdatasync: 1
+ftruncate: 1
+setpriority: 1
+getrlimit: 1
+inotify_add_watch: 1
+getrandom: 1
+getgroups: 1
+socketpair: 1
+unlinkat: 1
+accept4: 1
+geteuid: 1
+getgid: 1
+umask: 1
+inotify_init1: 1
+getpid: 1
+listen: 1
+restart_syscall: 1
+sched_getscheduler: 1
+sched_getaffinity: 1
+rt_sigreturn: 1
+exit_group: 1
+getegid: 1
+execve: 1
+fchmodat: 1
+epoll_create1: 1
+epoll_pwait: 1
+epoll_ctl: 1
+epoll_pwait: 1
+getsockopt: 1
+sendmsg: 1
+send: 1
+recv: 1
+dup: 1
+process_vm_readv: 1
+rt_tgsigqueueinfo: 1

proprietary/vendor/etc/seccomp_policy/qti-systemd.policy

@@ -0,0 +1,80 @@
+# Copyright (c) 2020 Qualcomm Technologies, Inc.
+# All Rights Reserved.
+# Confidential and Proprietary - Qualcomm Technologies, Inc
+#
+# Not a contribution.
+#
+# Copyright (C) 2018 The Android Open Source Project
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+munmap: 1
+mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+#prctl: arg0 == 0x37 /* PR_??? */ || arg0 == PR_SET_VMA || arg0 == PR_GET_DUMPABLE || arg0 == PR_SET_SECCOMP || arg0 == PR_CAP_AMBIENT || arg0 == PR_GET_NO_NEW_PRIVS || arg0 == PR_SET_DUMPABLE || arg0 == PR_GET_NAME || arg0 == PR_SET_PTRACER
+prctl: 1
+openat: 1
+read: 1
+futex: 1
+close: 1
+fstat: 1
+readlinkat: 1
+newfstatat: 1
+mremap: 1
+fstatfs: 1
+pread64: 1
+rt_sigprocmask: 1
+rt_sigaction: 1
+faccessat: 1
+#ioctl: arg1 == _IOC(_IOC_NONE
+ioctl: 1
+clock_gettime: 1
+getrandom: 1
+nanosleep: 1
+fcntl: 1
+getuid: 1
+sigaltstack: 1
+socket: arg0 == AF_QIPCRTR || arg0 == AF_UNIX
+writev: 1
+execve: 1
+getpid: 1
+set_tid_address: 1
+sched_getscheduler: 1
+sigaltstack: 1
+sched_getaffinity: 1
+connect: 1
+pipe2: 1
+clone: 1
+ppoll: 1
+restart_syscall: 1
+exit: 1
+exit_group: 1
+rt_sigreturn: 1
+rt_tgsigqueueinfo: 1
+getppid: 1
+dup: 1
+capget: 1
+capset: 1
+setsid: 1
+setitimer: 1
+ptrace: 1
+recvmsg: 1
+exit: 1
+restart_syscall: 1
+gettid: 1
+write: 1
+dup3: 1
+getdents64: 1
+getsockname: 1
+recvfrom: 1
+madvise: 1

proprietary/vendor/etc/seccomp_policy/vendor.qti.hardware.dsp.policy

@@ -0,0 +1,64 @@
+# Copyright (c) 2020 Qualcomm Technologies, Inc.
+# All Rights Reserved.
+# Confidential and Proprietary - Qualcomm Technologies, Inc
+#
+# Not a contribution.
+#
+# Copyright (C) 2018 The Android Open Source Project
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+munmap: 1
+#prctl: arg0 == PR_SET_VMA || arg0 == PR_GET_DUMPABLE || arg0 == 0x37
+mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+futex: 1
+read: 1
+openat: 1
+close: 1
+fstat: 1
+readlinkat: 1
+newfstatat: 1
+mremap: 1
+clock_gettime: 1
+pread64: 1
+fstatfs: 1
+rt_sigaction: 1
+faccessat: 1
+rt_sigprocmask: 1
+#ioctl: arg1 == TCGETS || arg1 == BINDER_WRITE_READ || arg1 == BINDER_SET_MAX_THREADS || arg1 == BINDER_VERSION
+ioctl: 1
+getrandom: 1
+fcntl: 1
+getuid: 1
+lseek: 1
+exit_group: 1
+sched_getaffinity: 1
+writev: 1
+exit: 1
+getpid: 1
+sigaltstack: 1
+getrlimit: 1
+restart_syscall: 1
+clone: 1
+sched_getscheduler: 1
+execve: 1
+socket: arg0 == AF_UNIX
+set_tid_address: 1
+rt_sigreturn: 1
+connect: 1
+gettid: 1
+setpriority: 1
+prctl: 1
+write: 1
+madvise: 1

proprietary/vendor/etc/seccomp_policy/wfdhdcphalservice.policy

@@ -0,0 +1,68 @@
+# Copyright (c) 2020-2021 Qualcomm Technologies, Inc.
+# All Rights Reserved.
+# Confidential and Proprietary - Qualcomm Technologies, Inc
+#
+# Not a contribution.
+#
+# Copyright (C) 2019 The Android Open Source Project
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+mmap2: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+munmap: 1
+mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+#prctl: arg0 == PR_GET_DUMPABLE || arg0 == PR_SET_VMA
+prctl: 1
+openat: 1
+futex: 1
+close: 1
+read: 1
+write: 1
+fstat64: 1
+fstatat64: 1
+readlinkat: 1
+fstatfs64: 1
+pread64: 1
+#ioctl: arg1 == BINDER_VERSION || arg1 == BINDER_SET_MAX_THREADS || arg1 == BINDER_WRITE_READ
+ioctl: 1
+faccessat: 1
+clock_gettime: 1
+getuid32: 1
+rt_sigaction: 1
+writev: 1
+madvise: 1
+_llseek: 1
+rt_sigprocmask: 1
+fcntl64: 1
+#set_tls: 1
+personality: 1
+getrandom: 1
+open: 1
+ugetrlimit: 1
+clone: 1
+set_tid_address: 1
+execve: 1
+sched_getscheduler: 1
+exit_group: 1
+rt_sigreturn: 1
+restart_syscall: 1
+connect: 1
+socket: arg0 == AF_UNIX
+exit: 1
+readlink: 1
+getpid: 1
+sigaltstack: 1
+setpriority: 1
+getdents64: 1
+dup: 1
+mremap:1

proprietary/vendor/etc/seccomp_policy/wfdvndservice.policy

@@ -0,0 +1,80 @@
+# Copyright (c) 2020 Qualcomm Technologies, Inc.
+# All Rights Reserved.
+# Confidential and Proprietary - Qualcomm Technologies, Inc
+#
+# Not a contribution.
+#
+# Copyright (C) 2019 The Android Open Source Project
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+mmap2: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+munmap: 1
+mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+#prctl: arg0 == PR_SET_VMA || arg0 == PR_GET_DUMPABLE
+prctl: 1
+futex: 1
+openat: 1
+fstatat64: 1
+read: 1
+write: 1
+close: 1
+sendto: 1
+clock_gettime: 1
+fstat64: 1
+faccessat: 1
+readlinkat: 1
+pread64: 1
+fstatfs64: 1
+getuid32: 1
+rt_sigaction: 1
+#ioctl: arg1 == BINDER_WRITE_READ || arg1 == BINDER_VERSION || arg1 == BINDER_SET_MAX_THREADS
+ioctl: 1
+writev: 1
+rt_sigprocmask: 1
+madvise: 1
+fcntl64: 1
+clone: 1
+#set_tls: 1
+open: 1
+personality: 1
+getrandom: 1
+restart_syscall: 1
+sched_getscheduler: 1
+execve: 1
+socket: arg0 == AF_UNIX
+exit_group: 1
+rt_sigreturn: 1
+connect: 1
+set_tid_address: 1
+readlink: 1
+ugetrlimit: 1
+exit: 1
+getpid: 1
+gettid: 1
+sigaltstack: 1
+setpriority: 1
+lseek: 1
+sched_yield: 1
+_llseek: 1
+nanosleep: 1
+flock: 1
+setsockopt: 1
+bind: 1
+getsockname: 1
+listen: 1
+pselect6: 1
+accept4: 1
+sendmsg: 1
+recvfrom: 1
+mremap: 1

proprietary/vendor/etc/seccomp_policy/wifidisplayhalservice.policy

@@ -0,0 +1,95 @@
+# Copyright (c) 2020, 2022 Qualcomm Technologies, Inc.
+# All Rights Reserved.
+# Confidential and Proprietary - Qualcomm Technologies, Inc
+#
+# Not a contribution.
+#
+# Copyright (C) 2019 The Android Open Source Project
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+#ioctl: arg1 == BINDER_WRITE_READ || arg1 == BINDER_VERSION || arg1 == VIDIOC_QBUF || arg1 == BINDER_SET_MAX_THREADS
+ioctl: 1
+futex: 1
+mmap2: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+clock_gettime: 1
+dup: 1
+munmap: 1
+mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+#prctl: arg0 == PR_GET_DUMPABLE || arg0 == PR_SET_VMA
+prctl: 1
+openat: 1
+close: 1
+fstat64: 1
+read: 1
+write: 1
+readlinkat: 1
+unlinkat: 1
+mremap: 1
+pread64: 1
+fstatfs64: 1
+fstatat64: 1
+getuid32: 1
+writev: 1
+faccessat: 1
+rt_sigaction: 1
+sendto: 1
+_llseek: 1
+madvise: 1
+rt_sigprocmask: 1
+fcntl64: 1
+#set_tls: 1
+personality: 1
+getrandom: 1
+ugetrlimit: 1
+rt_sigreturn: 1
+set_tid_address: 1
+open: 1
+exit: 1
+sched_getscheduler: 1
+connect: 1
+execve: 1
+getpid: 1
+exit_group: 1
+socket: arg0 == AF_UNIX
+clone: 1
+restart_syscall: 1
+sigaltstack: 1
+setpriority: 1
+setsockopt: 1
+getsockopt: 1
+bind: 1
+listen: 1
+socketpair: 1
+getpriority: 1
+pselect6: 1
+accept4: 1
+sendmsg: 1
+sendmmsg: 1
+recvmsg: 1
+recvfrom: 1
+gettimeofday: 1
+lseek: 1
+getsockname: 1
+nanosleep: 1
+ppoll: 1
+timer_create: 1
+timer_delete: 1
+timer_settime: 1
+rt_sigtimedwait: 1
+eventfd2: 1
+tgkill: 1
+gettid: 1
+sched_yield: 1
+flock: 1
+getdents64: 1