crosvm/seccomp/arm/video_device.policy
Lepton Wu fbb368a9f7 seccomp: Allow statx for video device on arm
I guess this was caused by libc uprev so the actual used
system call changed.

BUG=b:206348631
TEST=manual - Run arc.Boot.vm on kukui-arc-r with updated policy

Change-Id: Ibb8702d9ec6844624c9779088aefcdad34322d80
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3290581
Auto-Submit: Lepton Wu <lepton@chromium.org>
Commit-Queue: Keiichi Watanabe <keiichiw@chromium.org>
Tested-by: kokoro <noreply+kokoro@google.com>
Reviewed-by: Keiichi Watanabe <keiichiw@chromium.org>
2021-11-18 08:50:57 +00:00

30 lines
611 B
Text

# Copyright 2020 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
@include /usr/share/policy/crosvm/common_device.policy
# Syscalls specific to video devices.
clock_getres: 1
clock_getres_time64: 1
connect: 1
fstatfs64: 1
fstatfs: 1
getegid32: 1
geteuid32: 1
getgid32: 1
getrandom: 1
getresgid32: 1
getresuid32: 1
getsockname: 1
getuid32: 1
# ioctl: arg1 == DRM_IOCTL_*
ioctl: arg1 & 0x6400
memfd_create: 1
openat: 1
send: 1
setpriority: 1
socket: arg0 == AF_UNIX
statx: 1
stat64: 1
prctl: arg0 == PR_SET_NAME