mirror of
https://chromium.googlesource.com/crosvm/crosvm
synced 2024-11-28 09:33:01 +00:00
2e0a6532fd
BUG=b:211008411 BUG=b:210908665 TEST=venus on kukui-arc-r and emerge on trogdor64 Change-Id: I5773363857779ecd6c563af331ff7e96dd7f10e9 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3352664 Tested-by: kokoro <noreply+kokoro@google.com> Reviewed-by: Dennis Kempin <denniskempin@google.com> Reviewed-by: Chirantan Ekbote <chirantan@chromium.org> Commit-Queue: Chia-I Wu <olv@google.com>
20 lines
545 B
Text
20 lines
545 B
Text
# Copyright 2021 The Chromium OS Authors. All rights reserved.
|
|
# Use of this source code is governed by a BSD-style license that can be
|
|
# found in the LICENSE file.
|
|
|
|
@include /usr/share/policy/crosvm/gpu_common.policy
|
|
|
|
# allow fork() and waitid()
|
|
clone: 1
|
|
waitid: 1
|
|
|
|
# allow vsyslog
|
|
send: 1
|
|
# allow SOCK_STREAM and SOCK_DGRAM (syslog)
|
|
socket: arg0 == AF_UNIX && arg2 == 0
|
|
|
|
# allow socketpair(AF_UNIX, SOCK_SEQPACKET | SOCK_CLOEXEC)
|
|
socketpair: arg0 == AF_UNIX && arg1 == SOCK_SEQPACKET|SOCK_CLOEXEC && arg2 == 0
|
|
|
|
# allow signalfd()
|
|
signalfd4: 1
|