touch_updater/etphidiap: Add arm64 policy to support
BUG=b:441198164
TEST=1. emerge etphidiap build pass
2. verify upgrade and downgrade on a device pass
Change-Id: Ice13e6457031a4e3efb5dc54a320c4593efd1085
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/touch_updater/+/7256078
Tested-by: Haikun Zhou <zhouhaikun5@huaqin.corp-partner.google.com>
Commit-Queue: Tony Chang <tonytcc@google.com>
Reviewed-by: Henry Barnor <hbarnor@chromium.org>
Reviewed-by: zhaoxiong lv <lvzhaoxiong@huaqin.corp-partner.google.com>
Reviewed-by: Tony Chang <tonytcc@google.com>
(cherry picked from commit 40e7e0a632138b053eeab92c545a83b35ea680d2)
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/touch_updater/+/7305651
Reviewed-by: Shawn Ku <shawnku@chromium.org>
Release-Owner: Alon Bajayo <alonbajayo@google.com>
Reviewed-by: Zhengqiao Xia <xiazhengqiao@huaqin.corp-partner.google.com>
diff --git a/etphidiap/policies/arm64/etphidiap.query.policy b/etphidiap/policies/arm64/etphidiap.query.policy
new file mode 100644
index 0000000..7e97fe5
--- /dev/null
+++ b/etphidiap/policies/arm64/etphidiap.query.policy
@@ -0,0 +1,34 @@
+# Copyright 2025 The ChromiumOS Authors
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+
+# rseq should be first due to frequency and purpose to decrease nptl latency
+rseq: 1
+
+# ioctl: arg1 == I2C_SLAVE || arg1 == I2C_SLAVE_FORCE
+ioctl: arg1 == 0x703 || arg1 == 0x706
+mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+openat: 1
+fstat: 1
+mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+brk: 1
+munmap: 1
+rt_sigaction: 1
+close: 1
+rt_sigprocmask: 1
+# execve is required only to start etphid_updater via minijail.
+execve: 1
+faccessat: 1
+newfstatat: 1
+fstatfs: 1
+read: 1
+set_tid_address: 1
+set_robust_list: 1
+prlimit64: 1
+getrandom: arg2 in ~GRND_RANDOM
+getdents64: 1
+write: 1
+exit_group: 1
+restart_syscall: 1
+exit: 1
+rt_sigreturn: 1
diff --git a/etphidiap/policies/arm64/etphidiap.update.policy b/etphidiap/policies/arm64/etphidiap.update.policy
new file mode 100644
index 0000000..8839359
--- /dev/null
+++ b/etphidiap/policies/arm64/etphidiap.update.policy
@@ -0,0 +1,36 @@
+# Copyright 2025 The ChromiumOS Authors
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+
+# rseq should be first due to frequency and purpose to decrease nptl latency
+rseq: 1
+
+# ioctl: arg1 == I2C_SLAVE || arg1 == I2C_SLAVE_FORCE
+ioctl: arg1 == 0x703 || arg1 == 0x706
+write: 1
+clock_nanosleep: 1
+openat: 1
+mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+fstat: 1
+mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+brk: 1
+close: 1
+munmap: 1
+rt_sigaction: 1
+read: 1
+rt_sigprocmask: 1
+lseek: 1
+# execve is required only to start etphid_updater via minijail.
+execve: 1
+faccessat: 1
+newfstatat: 1
+fstatfs: 1
+set_tid_address: 1
+set_robust_list: 1
+prlimit64: 1
+getrandom: arg2 in ~GRND_RANDOM
+getdents64: 1
+exit_group: 1
+restart_syscall: 1
+exit: 1
+rt_sigreturn: 1
