summary refs log tree commit diff
path: root/seccomp/arm/rng_device.policy
diff options
context:
space:
mode:
authorMatt Delco <delco@chromium.org>2020-01-31 17:29:45 -0800
committerCommit Bot <commit-bot@chromium.org>2020-02-04 23:27:21 +0000
commit8488a0bbbb5828eb0cea77f4081ceecec0119707 (patch)
tree75885ce273ea6f9e819576e09bc9f99e3a79f18e /seccomp/arm/rng_device.policy
parent055de38fcf1159c7b3ce3e05b8ec0fcf07f635dc (diff)
downloadcrosvm-8488a0bbbb5828eb0cea77f4081ceecec0119707.tar
crosvm-8488a0bbbb5828eb0cea77f4081ceecec0119707.tar.gz
crosvm-8488a0bbbb5828eb0cea77f4081ceecec0119707.tar.bz2
crosvm-8488a0bbbb5828eb0cea77f4081ceecec0119707.tar.lz
crosvm-8488a0bbbb5828eb0cea77f4081ceecec0119707.tar.xz
crosvm-8488a0bbbb5828eb0cea77f4081ceecec0119707.tar.zst
crosvm-8488a0bbbb5828eb0cea77f4081ceecec0119707.zip
seccomp: remove redundant unconditional arm/arm64 rules
Minijail's policy compiler complains when there's multiple
unconditional rules for a syscall.  In most cases the rules
are redundant to common_device.policy.

BUG=None
TEST=Ran compile_seccomp_policy.py until it stopped
complaining.

Change-Id: Ic43d1fd13f9c012641d71e526942229eb8b08ed4
Signed-off-by: Matt Delco <delco@chromium.org>
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/2034024
Tested-by: kokoro <noreply+kokoro@google.com>
Reviewed-by: Dylan Reid <dgreid@chromium.org>
Diffstat (limited to 'seccomp/arm/rng_device.policy')
-rw-r--r--seccomp/arm/rng_device.policy3
1 files changed, 3 insertions, 0 deletions
diff --git a/seccomp/arm/rng_device.policy b/seccomp/arm/rng_device.policy
index 4f7aafd..0c7d258 100644
--- a/seccomp/arm/rng_device.policy
+++ b/seccomp/arm/rng_device.policy
@@ -3,3 +3,6 @@
 # found in the LICENSE file.
 
 @include /usr/share/policy/crosvm/common_device.policy
+
+open: return ENOENT
+openat: return ENOENT