summary refs log tree commit diff
path: root/seccomp/arm/video_device.policy
diff options
context:
space:
mode:
Diffstat (limited to 'seccomp/arm/video_device.policy')
-rw-r--r--seccomp/arm/video_device.policy25
1 files changed, 25 insertions, 0 deletions
diff --git a/seccomp/arm/video_device.policy b/seccomp/arm/video_device.policy
new file mode 100644
index 0000000..f8a722d
--- /dev/null
+++ b/seccomp/arm/video_device.policy
@@ -0,0 +1,25 @@
+# Copyright 2020 The Chromium OS Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+
+@include /usr/share/policy/crosvm/common_device.policy
+
+# Syscalls specific to video devices.
+clock_getres: 1
+clock_gettime: 1
+connect: 1
+fcntl64: arg1 == F_GETFL || arg1 == F_SETFL || arg1 == F_DUPFD_CLOEXEC || arg1 == F_GETFD || arg1 == F_SETFD
+getegid32: 1
+geteuid32: 1
+getgid32: 1
+getresgid32: 1
+getresuid32: 1
+getsockname: 1
+getuid32: 1
+# ioctl: arg1 == DRM_IOCTL_*
+ioctl: arg1 & 0x6400
+openat: 1
+send: 1
+setpriority: 1
+socket: arg0 == AF_UNIX
+stat64: 1