diff options
author | Matt Delco <delco@chromium.org> | 2019-11-14 17:48:44 -0800 |
---|---|---|
committer | Commit Bot <commit-bot@chromium.org> | 2020-01-22 17:36:36 +0000 |
commit | 4389dab57954af6806c706f29e3dfef7bb324915 (patch) | |
tree | cae2ee1526b7d238df71b91227e8249561193424 /seccomp/x86_64/net_device.policy | |
parent | 45caf91aaa80d2d37a63ed2bf99da69b4da0aafa (diff) | |
download | crosvm-4389dab57954af6806c706f29e3dfef7bb324915.tar crosvm-4389dab57954af6806c706f29e3dfef7bb324915.tar.gz crosvm-4389dab57954af6806c706f29e3dfef7bb324915.tar.bz2 crosvm-4389dab57954af6806c706f29e3dfef7bb324915.tar.lz crosvm-4389dab57954af6806c706f29e3dfef7bb324915.tar.xz crosvm-4389dab57954af6806c706f29e3dfef7bb324915.tar.zst crosvm-4389dab57954af6806c706f29e3dfef7bb324915.zip |
seccomp: remove redundant unconditional rules
Minijail's policy compiler complains when there's multiple unconditional rules for a syscall. In most cases the rules are redundant to common_device.policy. I don't know what to do about the intentionally contradictory rules for open and openat, other than to remove then from the common device policy and add it to all the others. BUG=None TEST=Ran compile_seccomp_policy.py until it stopped complaining. Change-Id: I6813dd1e0b39e975415662bd7de74c25a1be9eb3 Signed-off-by: Matt Delco <delco@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/1918607 Tested-by: kokoro <noreply+kokoro@google.com> Reviewed-by: Dylan Reid <dgreid@chromium.org>
Diffstat (limited to 'seccomp/x86_64/net_device.policy')
-rw-r--r-- | seccomp/x86_64/net_device.policy | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/seccomp/x86_64/net_device.policy b/seccomp/x86_64/net_device.policy index c7f17d9..5d6535a 100644 --- a/seccomp/x86_64/net_device.policy +++ b/seccomp/x86_64/net_device.policy @@ -6,3 +6,5 @@ # TUNSETOFFLOAD ioctl: arg1 == 0x400454d0 +open: return ENOENT +openat: return ENOENT |