seccomp: Add statx to video_device.policy for glibc

With the new glibc 2.33 roll, we're seeing crashes live relating to
statx (syscall 397). The process that's crashing is pcivirtio-video,
so we suspect video_device.policy is the breaking policy.

Crash report: http://shortn/_4EWpF4q77O

This was very recently fixed in arm (where the original crash occured),
however, it's still missing in the amd64/x86_64 policy file. It's
very feasible we'll see a similar case in the future with this arch.

BUG=b:187795909
TEST=CQ

Change-Id: I7b02ccf02d214590aadc37dc53e00ad34e178a4a
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3291890
Auto-Submit: Jordan R Abrahams <ajordanr@google.com>
Commit-Queue: Manoj Gupta <manojgupta@chromium.org>
Tested-by: kokoro <noreply+kokoro@google.com>
Reviewed-by: Chirantan Ekbote <chirantan@chromium.org>
Reviewed-by: Manoj Gupta <manojgupta@chromium.org>
This commit is contained in:
Jordan R Abrahams 2021-11-18 20:30:00 +00:00 committed by Commit Bot
parent 50f9591b6a
commit ff7f1ae9fe

View file

@ -26,6 +26,7 @@ socket: arg0 == AF_UNIX
stat: 1
fstat: 1
fstatfs: 1
statx: 1
# Rules needed for minigbm on AMD devices.
getrandom: 1