crosvm/seccomp/x86_64/iommu_device.policy

# Copyright 2021 The ChromiumOS Authors
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.

@include /usr/share/policy/crosvm/common_device.policy

prctl: arg0 == PR_SET_NAME
open: return ENOENT
openat: return ENOENT

# 0x3B71: VFIO_IOMMU_MAP_DMA
# 0x3B72: VFIO_IOMMU_UNMAP_DMA
ioctl: arg1 == 0x3B71 || arg1 == 0x3B72
Update all copyright headers to match new style This search/replace updates all copyright notices to drop the "All rights reserved", Use "ChromiumOS" instead of "Chromium OS" and drops the trailing dots. This fulfills the request from legal and unifies our notices. ./tools/health-check has been updated to only accept this style. BUG=b:246579983 TEST=./tools/health-check Change-Id: I87a80701dc651f1baf4820e5cc42469d7c5f5bf7 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/3894243 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Commit-Queue: Dennis Kempin <denniskempin@google.com> 2022-09-13 17:55:17 +00:00			`# Copyright 2021 The ChromiumOS Authors`
devices: virtio: iommu: enable virtio IOMMU driver By default virtio-IOMMU is disabled. It can be enabled per pass-through device. Sample command lines: default: virtio IOMMU disabled on pass-through device: --vfio=/sys/bus/pci/devices/0000:00:02.0 Explicitly disable virtio IOMMU: --vfio=/sys/bus/pci/devices/0000:00:02.0,iommu=off Enable virtio IOMMU on the desired pass-through device: --vfio=/sys/bus/pci/devices/0000:00:02.0,iommu=on BUG=b:181736020 TEST=passthru one device with iommu=on TEST=passthru two devices with iommu=on from different VFIO group TEST=passthru two devices with iommu=on from same VFIO group TEST=passthru one device with iommu=on and another device with iommu=off Change-Id: Id74d2210f774a90ba5e83671e76e061cb8fec758 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/2757276 Tested-by: kokoro <noreply+kokoro@google.com> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Reviewed-by: David Stevens <stevensd@chromium.org> Commit-Queue: David Stevens <stevensd@chromium.org> 2021-03-11 00:35:37 +00:00			`# Use of this source code is governed by a BSD-style license that can be`
			`# found in the LICENSE file.`

			`@include /usr/share/policy/crosvm/common_device.policy`

			`prctl: arg0 == PR_SET_NAME`
			`open: return ENOENT`
			`openat: return ENOENT`

			`# 0x3B71: VFIO_IOMMU_MAP_DMA`
			`# 0x3B72: VFIO_IOMMU_UNMAP_DMA`
			`ioctl: arg1 == 0x3B71 \|\| arg1 == 0x3B72`