crosvm/seccomp/aarch64/serial_device.policy

# Copyright 2022 The ChromiumOS Authors
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.

# Policy file for a serial device used as a regular, in-VMM virtio device.

@include /usr/share/policy/crosvm/common_device.policy
@include /usr/share/policy/crosvm/serial.policy
Update all copyright headers to match new style This search/replace updates all copyright notices to drop the "All rights reserved", Use "ChromiumOS" instead of "Chromium OS" and drops the trailing dots. This fulfills the request from legal and unifies our notices. ./tools/health-check has been updated to only accept this style. BUG=b:246579983 TEST=./tools/health-check Change-Id: I87a80701dc651f1baf4820e5cc42469d7c5f5bf7 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/3894243 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Commit-Queue: Dennis Kempin <denniskempin@google.com> 2022-09-13 17:55:17 +00:00			`# Copyright 2022 The ChromiumOS Authors`
coiommu: enable coiommu Coiommu can be enabled through the command line. E.g. To enable coiommu for a VFIO pass-through device: --vfio=/sys/bus/pci/devices/0000:00:02.0,iommu=coiommu BUG=b:188481989 TEST=Boot a VM with a VFIO pass through device w/ coiommu TEST=Boot a VM with a VFIO pass through device w/o coiommu Change-Id: Ica6145d7bc6a4c398f0fc10899f8ee24138615c4 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3292934 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Reviewed-by: David Stevens <stevensd@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> 2022-01-07 02:26:24 +00:00			`# Use of this source code is governed by a BSD-style license that can be`
			`# found in the LICENSE file.`

seccomp: define naming rules for policy files We are going to use separate policy files per device for the following scenarios: 1) Regular in-VMM virtio device, 2) Virtio device over vhost-user, 3) Virtio device over Vvu. Each of these scenarios require slightly different policies as a jailed device process needs to allow not only the system calls necessary for the device to function, but also those required by the virtio transport in use. This CL adds a README.md file to the seccomp directory that details the naming and policy inclusion rules, and updates the serial, xhci and coiommu policies to follow the naming scheme. Vhost-user and VVU policy files will be added along with support for jailing devices when they are in use. BUG=b:217480043 TEST=serial device works with `crosvm run`. Change-Id: I6d454aa6e05d00691fe3346e822ed1fc7b24aed8 Signed-off-by: Alexandre Courbot <acourbot@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3706490 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> 2022-06-15 07:58:14 +00:00			`# Policy file for a serial device used as a regular, in-VMM virtio device.`

			`@include /usr/share/policy/crosvm/common_device.policy`
			`@include /usr/share/policy/crosvm/serial.policy`