crosvm/seccomp/arm/9p_device.policy
Jordan R Abrahams 6b893cc59f seccomp: Add fstatfs (32bit) to arm policies
This is a commit to future-proof seccomp failures with syscall=100,
fstatfs. On 32bit systems, we've seen programs which use not just
fstatfs64, but also fstatfs. Which one is selected is seemlessly
selected via defines via `statvfs`, depending on the board
(notably scarlet, trogdor, and elm).

See also: https://man7.org/linux/man-pages/man2/statfs.2.html

BUG=b:197006863
TEST=CQ

Change-Id: I6eaea3064671a109d2d7844cde4eae43931c63bf
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3100412
Tested-by: kokoro <noreply+kokoro@google.com>
Reviewed-by: Chirantan Ekbote <chirantan@chromium.org>
Commit-Queue: Manoj Gupta <manojgupta@chromium.org>
2021-08-18 15:17:55 +00:00

33 lines
573 B
Text

# Copyright 2018 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
@include /usr/share/policy/crosvm/common_device.policy
pread64: 1
pwrite64: 1
stat64: 1
statx: 1
fstat64: 1
ioctl: arg1 == FIOCLEX
_llseek: 1
getdents64: 1
fdatasync: 1
fsync: 1
mkdirat: 1
open: 1
openat: 1
rmdir: 1
renameat: 1
linkat: 1
unlinkat: 1
socket: arg0 == AF_UNIX
utimensat: 1
utimensat_time64: 1
ftruncate64: 1
fchmod: 1
fchown: 1
fstatfs: 1
fstatfs64: 1
fstatat64: 1
prctl: arg0 == PR_SET_NAME