crosvm/seccomp/arm
Chuanxiao Dong a8d427b9b1 coiommu: enable coiommu
Coiommu can be enabled through the command line. E.g.
To enable coiommu for a VFIO pass-through device:
--vfio=/sys/bus/pci/devices/0000:00:02.0,iommu=coiommu

BUG=b:188481989
TEST=Boot a VM with a VFIO pass through device w/ coiommu
TEST=Boot a VM with a VFIO pass through device w/o coiommu

Change-Id: Ica6145d7bc6a4c398f0fc10899f8ee24138615c4
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3292934
Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
Reviewed-by: David Stevens <stevensd@chromium.org>
Tested-by: kokoro <noreply+kokoro@google.com>
2022-01-22 06:46:46 +00:00
..
9p_device.policy seccomp: Add fstatfs (32bit) to arm policies 2021-08-18 15:17:55 +00:00
balloon_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
battery.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
block_device.policy seccomp: allow fstatat64/statx syscalls on arm 2021-08-26 20:59:21 +00:00
coiommu.policy coiommu: enable coiommu 2022-01-22 06:46:46 +00:00
common_device.policy seccomp: add getcwd and readlink to common policy for panic 2021-12-02 23:18:03 +00:00
cras_audio_device.policy seccomp: Allow lseek on cras_audio_device 2021-11-29 23:28:45 +00:00
cras_snd_device.policy seccomp: Add timerfd_* to cras_snd_device.policy 2021-10-11 05:10:11 +00:00
fs_device.policy seccomp: add getcwd and readlink to common policy for panic 2021-12-02 23:18:03 +00:00
gpu_common.policy gpu: allow syslog from the render server 2021-12-14 16:54:22 +00:00
gpu_device.policy gpu: allow syslog from the render server 2021-12-14 16:54:22 +00:00
gpu_render_server.policy gpu_render_server: allow syslog and signalfd again 2021-12-22 06:01:25 +00:00
input_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
net_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
null_audio_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
pmem_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
rng_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
serial.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
tpm_device.policy seccomp: add getcwd and readlink to common policy for panic 2021-12-02 23:18:03 +00:00
vhost_net_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
vhost_vsock_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
video_device.policy seccomp: Allow statx for video device on arm 2021-11-18 08:50:57 +00:00
vios_audio_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
wl_device.policy wl: update seccomp policies for SYNC_IOC_FILE_INFO on arm 2021-11-11 19:31:37 +00:00
xhci.policy seccomp: add getcwd and readlink to common policy for panic 2021-12-02 23:18:03 +00:00