summary refs log tree commit diff
path: root/seccomp/aarch64/block_device.policy
diff options
context:
space:
mode:
authorStephen Boyd <swboyd@chromium.org>2019-12-02 10:28:28 -0800
committerCommit Bot <commit-bot@chromium.org>2019-12-06 19:06:34 +0000
commitcef1079c2058457bc9485fc0f41f5fe1d592e715 (patch)
treebf2425953d87e4253d85fedf6c1cf526668ee0ee /seccomp/aarch64/block_device.policy
parent92a2c49349404b4ba90941e18e8a828beca52390 (diff)
downloadcrosvm-cef1079c2058457bc9485fc0f41f5fe1d592e715.tar
crosvm-cef1079c2058457bc9485fc0f41f5fe1d592e715.tar.gz
crosvm-cef1079c2058457bc9485fc0f41f5fe1d592e715.tar.bz2
crosvm-cef1079c2058457bc9485fc0f41f5fe1d592e715.tar.lz
crosvm-cef1079c2058457bc9485fc0f41f5fe1d592e715.tar.xz
crosvm-cef1079c2058457bc9485fc0f41f5fe1d592e715.tar.zst
crosvm-cef1079c2058457bc9485fc0f41f5fe1d592e715.zip
seccomp: Add initial arm64 seccomp filters
BUG=chromium:1029666
TEST=tast run crostini.LaunchTerminal.download_buster

Change-Id: I8fa7dc9df4d5f0144aed80fcd60307036fc7e16d
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/1946765
Reviewed-by: Stephen Barber <smbarber@chromium.org>
Tested-by: kokoro <noreply+kokoro@google.com>
Tested-by: Stephen Barber <smbarber@chromium.org>
Commit-Queue: Stephen Barber <smbarber@chromium.org>
Diffstat (limited to 'seccomp/aarch64/block_device.policy')
-rw-r--r--seccomp/aarch64/block_device.policy17
1 files changed, 17 insertions, 0 deletions
diff --git a/seccomp/aarch64/block_device.policy b/seccomp/aarch64/block_device.policy
new file mode 100644
index 0000000..14287e3
--- /dev/null
+++ b/seccomp/aarch64/block_device.policy
@@ -0,0 +1,17 @@
+# Copyright 2019 The Chromium OS Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+
+@include /usr/share/policy/crosvm/common_device.policy
+
+fallocate: 1
+fdatasync: 1
+fstat: 1
+fsync: 1
+ftruncate: 1
+lseek: 1
+preadv: 1
+pwritev: 1
+timerfd_create: 1
+timerfd_gettime: 1
+timerfd_settime: 1