summary refs log tree commit diff
diff options
context:
space:
mode:
authorChirantan Ekbote <chirantan@chromium.org>2018-09-18 18:29:15 -0700
committerchrome-bot <chrome-bot@chromium.org>2018-09-21 19:50:12 -0700
commit0a4f280e3a1c3ba77e1efa37c18bbdcea03a0d64 (patch)
treef4e9168d51b0d1c3d1bbb83b70011f0418912647
parent5abdc78c82cac432ec5b8f1a03c151260eafe89e (diff)
downloadcrosvm-0a4f280e3a1c3ba77e1efa37c18bbdcea03a0d64.tar
crosvm-0a4f280e3a1c3ba77e1efa37c18bbdcea03a0d64.tar.gz
crosvm-0a4f280e3a1c3ba77e1efa37c18bbdcea03a0d64.tar.bz2
crosvm-0a4f280e3a1c3ba77e1efa37c18bbdcea03a0d64.tar.lz
crosvm-0a4f280e3a1c3ba77e1efa37c18bbdcea03a0d64.tar.xz
crosvm-0a4f280e3a1c3ba77e1efa37c18bbdcea03a0d64.tar.zst
crosvm-0a4f280e3a1c3ba77e1efa37c18bbdcea03a0d64.zip
seccomp: Update 9p policy
Add newfstatat for x86 and fstatat64 for arm to the seccomp policy file
for the 9p device and server program.

BUG=chromium:886535
TEST=`vmc share termina foo` and then `ls /mnt/shared` inside the VM
     works

Change-Id: I6871f54ae885e080dca0ea5751987d59c55a59d6
Signed-off-by: Chirantan Ekbote <chirantan@chromium.org>
Reviewed-on: https://chromium-review.googlesource.com/1232556
Reviewed-by: Stephen Barber <smbarber@chromium.org>
-rw-r--r--seccomp/arm/9p_device.policy1
-rw-r--r--seccomp/arm/9s.policy1
-rw-r--r--seccomp/x86_64/9p_device.policy1
-rw-r--r--seccomp/x86_64/9s.policy1
4 files changed, 4 insertions, 0 deletions
diff --git a/seccomp/arm/9p_device.policy b/seccomp/arm/9p_device.policy
index 238fb87..52df2f0 100644
--- a/seccomp/arm/9p_device.policy
+++ b/seccomp/arm/9p_device.policy
@@ -52,3 +52,4 @@ utimensat: 1
 ftruncate64: 1
 fchown: arg1 == 0xffffffff && arg2 == 0xffffffff
 statfs64: 1
+fstatat64: 1
diff --git a/seccomp/arm/9s.policy b/seccomp/arm/9s.policy
index 37325d3..494e683 100644
--- a/seccomp/arm/9s.policy
+++ b/seccomp/arm/9s.policy
@@ -59,3 +59,4 @@ rmdir: 1
 # Calling fchown with -1 as the uid/gid will change the ctime but do nothing else.
 fchown: arg1 == 0xffffffff && arg2 == 0xffffffff
 mremap: 1
+fstatat64: 1
diff --git a/seccomp/x86_64/9p_device.policy b/seccomp/x86_64/9p_device.policy
index d161b5c..6a9d64a 100644
--- a/seccomp/x86_64/9p_device.policy
+++ b/seccomp/x86_64/9p_device.policy
@@ -52,3 +52,4 @@ utimensat: 1
 ftruncate: 1
 fchown: arg1 == 0xffffffff && arg2 == 0xffffffff
 statfs: 1
+newfstatat: 1
diff --git a/seccomp/x86_64/9s.policy b/seccomp/x86_64/9s.policy
index 75cf032..22600bf 100644
--- a/seccomp/x86_64/9s.policy
+++ b/seccomp/x86_64/9s.policy
@@ -58,3 +58,4 @@ ftruncate: 1
 mkdir: 1
 mremap: 1
 rename: 1
+newfstatat: 1