From 95f4506462317288474427fb4b0b116e94373b93 Mon Sep 17 00:00:00 2001 From: Bruno Martins Date: Wed, 1 Jan 2025 22:55:13 +0000 Subject: [PATCH] sm8250-common: Do not override configstore seccomp policy --- .../etc/seccomp_policy/configstore@1.1.policy | 57 ------------------- sm8250-common-vendor.mk | 1 - 2 files changed, 58 deletions(-) delete mode 100644 proprietary/vendor/etc/seccomp_policy/configstore@1.1.policy diff --git a/proprietary/vendor/etc/seccomp_policy/configstore@1.1.policy b/proprietary/vendor/etc/seccomp_policy/configstore@1.1.policy deleted file mode 100644 index a609620..0000000 --- a/proprietary/vendor/etc/seccomp_policy/configstore@1.1.policy +++ /dev/null @@ -1,57 +0,0 @@ -# Copyright (C) 2017 The Android Open Source Project -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -futex: 1 -# ioctl: arg1 == BINDER_WRITE_READ -ioctl: arg1 == 0xc0306201 -# prctl: arg0 == PR_SET_NAME || arg0 == PR_SET_VMA || arg0 == PR_SET_TIMERSLACK -# || arg0 == PR_GET_NO_NEW_PRIVS # used by crash_dump -# prctl: arg0 == 15 || arg0 == 0x53564d41 || arg0 == 29 || arg0 == 39 -# TODO(b/68162846) reduce scope of prctl() based on arguments -prctl: 1 -openat: 1 -mmap: 1 -mprotect: 1 -close: 1 -getuid: 1 -read: 1 -faccessat: 1 -write: 1 -fstat: 1 -clone: 1 -sched_setscheduler: 1 -munmap: 1 -lseek: 1 -sigaltstack: 1 -writev: 1 -setpriority: 1 -restart_syscall: 1 -exit: 1 -exit_group: 1 -rt_sigreturn: 1 -getrlimit: 1 -madvise: 1 -getdents64: 1 -clock_gettime: 1 -getpid: 1 -gettid: 1 - -# used during process crash by crash_dump to dump process info -rt_sigprocmask: 1 -rt_sigaction: 1 -# socket: arg0 == AF_LOCAL -socket: arg0 == 1 -connect: 1 -recvmsg: 1 -rt_tgsigqueueinfo: 1 diff --git a/sm8250-common-vendor.mk b/sm8250-common-vendor.mk index 1a2c028..f098466 100644 --- a/sm8250-common-vendor.mk +++ b/sm8250-common-vendor.mk @@ -133,7 +133,6 @@ PRODUCT_COPY_FILES += \ vendor/samsung/sm8250-common/proprietary/vendor/etc/sap.conf:$(TARGET_COPY_OUT_VENDOR)/etc/sap.conf \ vendor/samsung/sm8250-common/proprietary/vendor/etc/sec_config:$(TARGET_COPY_OUT_VENDOR)/etc/sec_config \ vendor/samsung/sm8250-common/proprietary/vendor/etc/sec_config_oem:$(TARGET_COPY_OUT_VENDOR)/etc/sec_config_oem \ - vendor/samsung/sm8250-common/proprietary/vendor/etc/seccomp_policy/configstore@1.1.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/configstore@1.1.policy \ vendor/samsung/sm8250-common/proprietary/vendor/etc/seccomp_policy/mediacodec.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/mediacodec.policy \ vendor/samsung/sm8250-common/proprietary/vendor/etc/seccomp_policy/vendor.qti.hardware.dsp.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/vendor.qti.hardware.dsp.policy \ vendor/samsung/sm8250-common/proprietary/vendor/etc/sensors/config/ak991x_dri_0.json:$(TARGET_COPY_OUT_VENDOR)/etc/sensors/config/ak991x_dri_0.json \