code-intelligence.com/cifuzz@v0.40.0/third-party/minijail/examples/cat.policy (about)

     1  # In this directory, test with:
     2  # make LIBDIR=.
     3  # ./minijail0 -n -S examples/cat.policy -- /bin/cat /proc/self/status
     4  # This policy only works on x86_64.
     5  
     6  read: 1
     7  write: 1
     8  restart_syscall: 1
     9  rt_sigreturn: 1
    10  exit_group: 1
    11  
    12  open: 1
    13  openat: 1
    14  close: 1
    15  fstat: 1
    16  # Enforce W^X.
    17  mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
    18  fadvise64: 1