summary refs log tree commit diff
path: root/seccomp
diff options
context:
space:
mode:
authorChirantan Ekbote <chirantan@chromium.org>2020-03-05 15:29:41 +0900
committerCommit Bot <commit-bot@chromium.org>2020-03-06 03:48:12 +0000
commit29775733653225023cce80915b4f4eefa41c695a (patch)
tree7ebde2216c4b6cf08974d6513a7d82a2e77f1c5b /seccomp
parentea6cf66ab537ea554c53fa8723f5bd20b8ec98bf (diff)
downloadcrosvm-29775733653225023cce80915b4f4eefa41c695a.tar
crosvm-29775733653225023cce80915b4f4eefa41c695a.tar.gz
crosvm-29775733653225023cce80915b4f4eefa41c695a.tar.bz2
crosvm-29775733653225023cce80915b4f4eefa41c695a.tar.lz
crosvm-29775733653225023cce80915b4f4eefa41c695a.tar.xz
crosvm-29775733653225023cce80915b4f4eefa41c695a.tar.zst
crosvm-29775733653225023cce80915b4f4eefa41c695a.zip
seccomp: Add missing syscalls to fs device policy
BUG=none
TEST=`tast run <dut> vm.Fio.virtiofs`

Change-Id: I937df0be738e0aa302a4ad3e87ed33ff97afb4fc
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/2089174
Tested-by: Chirantan Ekbote <chirantan@chromium.org>
Tested-by: kokoro <noreply+kokoro@google.com>
Auto-Submit: Chirantan Ekbote <chirantan@chromium.org>
Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
Commit-Queue: Chirantan Ekbote <chirantan@chromium.org>
Diffstat (limited to 'seccomp')
-rw-r--r--seccomp/aarch64/fs_device.policy3
-rw-r--r--seccomp/arm/fs_device.policy3
-rw-r--r--seccomp/x86_64/fs_device.policy3
3 files changed, 9 insertions, 0 deletions
diff --git a/seccomp/aarch64/fs_device.policy b/seccomp/aarch64/fs_device.policy
index 5199092..9fd4c8b 100644
--- a/seccomp/aarch64/fs_device.policy
+++ b/seccomp/aarch64/fs_device.policy
@@ -4,10 +4,13 @@
 
 @include /usr/share/policy/crosvm/common_device.policy
 
+fallocate: 1
 fchmodat: 1
 fchownat: 1
+fdatasync: 1
 fgetxattr: 1
 fsetxattr: 1
+fsync: 1
 newfstatat: 1
 fstatfs: 1
 ftruncate: 1
diff --git a/seccomp/arm/fs_device.policy b/seccomp/arm/fs_device.policy
index 5822261..eb9df16 100644
--- a/seccomp/arm/fs_device.policy
+++ b/seccomp/arm/fs_device.policy
@@ -4,12 +4,15 @@
 
 @include /usr/share/policy/crosvm/common_device.policy
 
+fallocate: 1
 fchmodat: 1
 fchownat: 1
+fdatasync: 1
 fgetxattr: 1
 fsetxattr: 1
 fstatat64: 1
 fstatfs64: 1
+fsync: 1
 ftruncate64: 1
 getdents64: 1
 getegid32: 1
diff --git a/seccomp/x86_64/fs_device.policy b/seccomp/x86_64/fs_device.policy
index 32e7477..ddb2a51 100644
--- a/seccomp/x86_64/fs_device.policy
+++ b/seccomp/x86_64/fs_device.policy
@@ -4,11 +4,14 @@
 
 @include /usr/share/policy/crosvm/common_device.policy
 
+fallocate: 1
 fchmodat: 1
 fchownat: 1
+fdatasync: 1
 fgetxattr: 1
 fsetxattr: 1
 fstatfs: 1
+fsync: 1
 ftruncate: 1
 getdents64: 1
 getegid: 1