seccomp: Whitelist syscalls for grunt gpu

BUG=b:127868532
TEST=`vmc start --enable-gpu termina` succeeds

Change-Id: Ibf18cce93ab98f5008bdada3387ee27eb6f79e61
Reviewed-on: https://chromium-review.googlesource.com/1534959
Commit-Ready: ChromeOS CL Exonerator Bot <chromiumos-cl-exonerator@appspot.gserviceaccount.com>
Tested-by: Drew Davenport <ddavenport@chromium.org>
Tested-by: kokoro <noreply+kokoro@google.com>
Reviewed-by: David Riley <davidriley@chromium.org>
This commit is contained in:
Drew Davenport 2019-03-21 15:26:27 -06:00 committed by chrome-bot
parent 2a01b4d2df
commit 1f9ae42c73

View file

@ -64,3 +64,8 @@ readlink: 1
socket: arg0 == 1 && arg1 == 0x80001 && arg2 == 0
stat: 1
sysinfo: 1
# Rules specific to AMD gpus.
uname: 1
sched_setscheduler: 1
sched_setaffinity: 1