diff options
Diffstat (limited to 'seccomp')
-rw-r--r-- | seccomp/arm/fs_device.policy | 32 | ||||
-rw-r--r-- | seccomp/x86_64/fs_device.policy | 32 |
2 files changed, 64 insertions, 0 deletions
diff --git a/seccomp/arm/fs_device.policy b/seccomp/arm/fs_device.policy new file mode 100644 index 0000000..2d90307 --- /dev/null +++ b/seccomp/arm/fs_device.policy @@ -0,0 +1,32 @@ +# Copyright 2019 The Chromium OS Authors. All rights reserved. +# Use of this source code is governed by a BSD-style license that can be +# found in the LICENSE file. + +openat: 1 + +@include /usr/share/policy/crosvm/common_device.policy + +fchmodat: 1 +fchownat: 1 +fgetxattr: 1 +fsetxattr: 1 +fstatat64: 1 +fstatfs64: 1 +ftruncate64: 1 +getdents64: 1 +getegid: 1 +geteuid: 1 +linkat: 1 +_llseek: 1 +mkdirat: 1 +mknodat: 1 +preadv: 1 +pwritev: 1 +readlinkat: 1 +renameat2: 1 +setresgid: 1 +setresuid: 1 +symlinkat: 1 +umask: 1 +unlinkat: 1 +utimensat: 1 \ No newline at end of file diff --git a/seccomp/x86_64/fs_device.policy b/seccomp/x86_64/fs_device.policy new file mode 100644 index 0000000..cbf0288 --- /dev/null +++ b/seccomp/x86_64/fs_device.policy @@ -0,0 +1,32 @@ +# Copyright 2019 The Chromium OS Authors. All rights reserved. +# Use of this source code is governed by a BSD-style license that can be +# found in the LICENSE file. + +openat: 1 + +@include /usr/share/policy/crosvm/common_device.policy + +fchmodat: 1 +fchownat: 1 +fgetxattr: 1 +fsetxattr: 1 +fstatfs: 1 +ftruncate: 1 +getdents64: 1 +getegid: 1 +geteuid: 1 +linkat: 1 +lseek: 1 +mkdirat: 1 +mknodat: 1 +newfstatat: 1 +preadv: 1 +pwritev: 1 +readlinkat: 1 +renameat2: 1 +setresgid: 1 +setresuid: 1 +symlinkat: 1 +umask: 1 +unlinkat: 1 +utimensat: 1 \ No newline at end of file |