# Organized by frequency of systemcall - in descending order for
# best performance.
ioctl: 1
futex: 1
prctl: 1
write: 1
getpriority: 1
mmap2: 1
close: 1
munmap: 1
dup: 1
mprotect: 1
getuid32: 1
setpriority: 1
sigaltstack: 1
openat: 1
open: 1
clone: 1
read: 1
clock_gettime: 1
lseek: 1
writev: 1
fstatat64: 1
fstatfs64: 1
fstat64: 1
restart_syscall: 1
exit: 1
exit_group: 1
rt_sigreturn: 1
faccessat: 1
madvise: 1
brk: 1
sched_setscheduler: 1
gettid: 1
rt_sigprocmask: 1
sched_yield: 1
ugetrlimit: 1
geteuid32: 1
getgid32: 1
getegid32: 1
getgroups32: 1
nanosleep: 1
getrandom: 1
timer_create: 1
timer_settime: 1
timer_delete: 1

# for dynamically loading extractors
pread64: 1

# mremap: Ensure |flags| are (MREMAP_MAYMOVE | MREMAP_FIXED) TODO: Once minijail
# parser support for '<' is in this needs to be modified to also prevent
# |old_address| and |new_address| from touching the exception vector page, which
# on ARM is statically loaded at 0xffff 0000. See
# http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.ddi0211h/Babfeega.html
# for more details.
mremap: arg3 == 3 || arg3 == MREMAP_MAYMOVE

# for FileSource
readlinkat: 1
_llseek: 1

@include /apex/com.android.media/etc/seccomp_policy/crash_dump.arm.policy
@include /apex/com.android.media/etc/seccomp_policy/code_coverage.arm.policy