# Copyright 2021 The Chromium OS Authors. All rights reserved. | |
# Use of this source code is governed by a BSD-style license that can be | |
# found in the LICENSE file. | |
getpid: 1 | |
madvise: 1 | |
# Don't allow mmap with both PROT_WRITE and PROT_EXEC. | |
mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE | |
# Don't allow mprotect with PROT_EXEC. | |
mprotect: arg2 in ~PROT_EXEC | |
mlock: 1 | |
munlock: 1 |