crosvm/seccomp/arm/coiommu.policy

# Copyright 2022 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
@include /usr/share/policy/crosvm/common_device.policy

# VFIO_IOMMU_MAP/UNMAP_DMA
ioctl: arg1 == 0x3B71 || arg1 == 0x3B72
prctl: arg0 == PR_SET_NAME
timerfd_create: 1
timerfd_settime: 1
timerfd_gettime: 1
coiommu: enable coiommu Coiommu can be enabled through the command line. E.g. To enable coiommu for a VFIO pass-through device: --vfio=/sys/bus/pci/devices/0000:00:02.0,iommu=coiommu BUG=b:188481989 TEST=Boot a VM with a VFIO pass through device w/ coiommu TEST=Boot a VM with a VFIO pass through device w/o coiommu Change-Id: Ica6145d7bc6a4c398f0fc10899f8ee24138615c4 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3292934 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Reviewed-by: David Stevens <stevensd@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> 2022-01-07 02:26:24 +00:00			`# Copyright 2022 The Chromium OS Authors. All rights reserved.`
			`# Use of this source code is governed by a BSD-style license that can be`
			`# found in the LICENSE file.`
			`@include /usr/share/policy/crosvm/common_device.policy`

			`# VFIO_IOMMU_MAP/UNMAP_DMA`
			`ioctl: arg1 == 0x3B71 \|\| arg1 == 0x3B72`
			`prctl: arg0 == PR_SET_NAME`
coiommu: add LRU unpin policy LRU unpin policy is an internal unpin policy which is triggered by a timer. This policy can be used when there is no external balloon unpin request. BUG=b:188481989 TEST=Boot a VM with coiommu enabled + pass through devices. Change-Id: Icb6e19073cb668fa954aec97e02be77f1b8f6a04 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3292937 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> Reviewed-by: David Stevens <stevensd@chromium.org> 2021-12-09 08:24:30 +00:00			`timerfd_create: 1`
			`timerfd_settime: 1`
			`timerfd_gettime: 1`