summary refs log tree commit diff
path: root/seccomp/x86_64
diff options
context:
space:
mode:
authorpaulhsia <paulhsia@chromium.org>2019-01-22 15:22:25 +0800
committerchrome-bot <chrome-bot@chromium.org>2019-01-27 10:43:26 -0800
commitf052cfefc8d6d27fa068c34190615db1819b8fef (patch)
treef7d2825383a5f8307a9743971e8bc6b001835965 /seccomp/x86_64
parent3082e8e48d73a4cf98b33052247d0ddb0d411111 (diff)
downloadcrosvm-f052cfefc8d6d27fa068c34190615db1819b8fef.tar
crosvm-f052cfefc8d6d27fa068c34190615db1819b8fef.tar.gz
crosvm-f052cfefc8d6d27fa068c34190615db1819b8fef.tar.bz2
crosvm-f052cfefc8d6d27fa068c34190615db1819b8fef.tar.lz
crosvm-f052cfefc8d6d27fa068c34190615db1819b8fef.tar.xz
crosvm-f052cfefc8d6d27fa068c34190615db1819b8fef.tar.zst
crosvm-f052cfefc8d6d27fa068c34190615db1819b8fef.zip
linux: Add ac97 device with CRAS backend
Add an ac97 device that plays audio through CRAS audio server.

BUG=chromium:781398
BUG=chromium:907520
TEST=Test building by $ cargo build
TEST=Deploy crosvm to DUT and test audio functionality
CQ-DEPEND=CL:1429311
CQ-DEPEND=CL:1429542

Change-Id: Ia273d8f1e82c20d1f1882f088886458339399aae
Reviewed-on: https://chromium-review.googlesource.com/1426282
Commit-Ready: Chih-Yang Hsia <paulhsia@chromium.org>
Tested-by: kokoro <noreply+kokoro@google.com>
Tested-by: Chih-Yang Hsia <paulhsia@chromium.org>
Reviewed-by: Chih-Yang Hsia <paulhsia@chromium.org>
Diffstat (limited to 'seccomp/x86_64')
-rw-r--r--seccomp/x86_64/cras_audio_device.policy47
1 files changed, 47 insertions, 0 deletions
diff --git a/seccomp/x86_64/cras_audio_device.policy b/seccomp/x86_64/cras_audio_device.policy
new file mode 100644
index 0000000..9257a18
--- /dev/null
+++ b/seccomp/x86_64/cras_audio_device.policy
@@ -0,0 +1,47 @@
+# Copyright 2019 The Chromium OS Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+
+close: 1
+dup: 1
+dup2: 1
+exit: 1
+exit_group: 1
+futex: 1
+# Disallow mmap with PROT_EXEC set.  The syntax here doesn't allow bit
+# negation, thus the manually negated mask constant.
+mmap: arg2 in 0xfffffffb
+mprotect: arg2 in 0xfffffffb
+madvise: 1
+munmap: 1
+read: 1
+recvfrom: 1
+sched_getaffinity: 1
+set_robust_list: 1
+sigaltstack: 1
+# Disallow clone's other than new threads.
+clone: arg0 & 0x00010000
+write: 1
+eventfd2: 1
+nanosleep: 1
+poll: 1
+ppoll: 1
+getpid: 1
+# Allow PR_SET_NAME only.
+prctl: arg0 == 15
+prlimit64: 1
+restart_syscall: 1
+setrlimit: 1
+epoll_create1: 1
+epoll_ctl: 1
+epoll_wait: 1
+# Kill child thread when it fails
+tgkill: 1
+# Real time priority
+rt_sigprocmask: 1
+rt_sigaction: 1
+rt_sigreturn: 1
+# Sockets
+recvmsg: 1
+sendmsg: 1
+socketpair: arg0 == AF_UNIX