mirrors/crosvm
1
0
Fork 0
mirror of https://chromium.googlesource.com/crosvm/crosvm synced 2025-02-06 02:25:23 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
crosvm/seccomp/x86_64/video_device.policy

38 lines
1 KiB
Text
Raw Normal View History

devices: virtio: Initial implementation of virtio-video device This CL adds a fundamental part of the virtio video device, which will be shared between the encoder and the decoder. Both devices uses the virtio-video protocol proposed as RFC v3 [1,2]. The corresponding driver code is at CL:2060327 and its children CLs. The actual decoding and encoding logic will be implemented in different CLs. [1]: mail: https://markmail.org/thread/wxdne5re7aaugbjg [2]: PDF: https://drive.google.com/file/d/1jOsS2WdVhL4PpcWLO8Zukq5J0fXDiWn-/view BUG=b:147465619, b:140082257 TEST=cargo check --features=video-decoder,video-encoder TEST=ARCVM started with --video-decoder --video-encoder Cq-Depend: chromium:2203997 Change-Id: I01999eea218ba0f3aaed1558ca2311a57d0c6819 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/1973973 Reviewed-by: Keiichi Watanabe <keiichiw@chromium.org> Tested-by: Keiichi Watanabe <keiichiw@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> Commit-Queue: Keiichi Watanabe <keiichiw@chromium.org>
2019-12-06 13:24:40 +00:00
# Copyright 2020 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
@include /usr/share/policy/crosvm/common_device.policy
# Syscalls specific to video devices.
clock_getres: 1
connect: 1
fcntl: arg1 == F_GETFL || arg1 == F_SETFL || arg1 == F_DUPFD_CLOEXEC || arg1 == F_GETFD || arg1 == F_SETFD
getdents: 1
getegid: 1
geteuid: 1
getgid: 1
getresgid: 1
getresuid: 1
getsockname: 1
getuid: 1
# ioctl: arg1 == DRM_IOCTL_*
ioctl: arg1 & 0x6400
openat: 1
secomp: Allow sched_yield for video device. libvda depends on libchrome and libchrome call sched_yield in NeedsLazyInstance sometimes. BUG=b:159855961 TEST=manual - keep running `android -c reboot` on hatch-arc-r Change-Id: I39afb77541c6d129ff84a776644c5cb68687ec82 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/2269339 Commit-Queue: Lepton Wu <lepton@chromium.org> Commit-Queue: Chirantan Ekbote <chirantan@chromium.org> Commit-Queue: Alexandre Courbot <acourbot@chromium.org> Tested-by: Lepton Wu <lepton@chromium.org> Auto-Submit: Lepton Wu <lepton@chromium.org> Reviewed-by: Chirantan Ekbote <chirantan@chromium.org> Reviewed-by: Alexandre Courbot <acourbot@chromium.org>
2020-06-26 03:24:29 +00:00
sched_yield: 1
devices: virtio: Initial implementation of virtio-video device This CL adds a fundamental part of the virtio video device, which will be shared between the encoder and the decoder. Both devices uses the virtio-video protocol proposed as RFC v3 [1,2]. The corresponding driver code is at CL:2060327 and its children CLs. The actual decoding and encoding logic will be implemented in different CLs. [1]: mail: https://markmail.org/thread/wxdne5re7aaugbjg [2]: PDF: https://drive.google.com/file/d/1jOsS2WdVhL4PpcWLO8Zukq5J0fXDiWn-/view BUG=b:147465619, b:140082257 TEST=cargo check --features=video-decoder,video-encoder TEST=ARCVM started with --video-decoder --video-encoder Cq-Depend: chromium:2203997 Change-Id: I01999eea218ba0f3aaed1558ca2311a57d0c6819 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/1973973 Reviewed-by: Keiichi Watanabe <keiichiw@chromium.org> Tested-by: Keiichi Watanabe <keiichiw@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> Commit-Queue: Keiichi Watanabe <keiichiw@chromium.org>
2019-12-06 13:24:40 +00:00
setpriority: 1
socket: arg0 == AF_UNIX
stat: 1
seccomp: x86_64: Allow fstat for video device libvda depends minigbm, on amdgpu, minigbm calls dri_init to check GPU type. dri_init calls drmGetRenderDeviceNameFromFd in libdrm which calls fstat. BUG=b:161376212 TEST=manual - Run arcvm on grunt Change-Id: I3dcb723711030d25e85cf3cac4cc7c66e0e2077f Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/2301439 Commit-Queue: Lepton Wu <lepton@chromium.org> Commit-Queue: Chirantan Ekbote <chirantan@chromium.org> Tested-by: Lepton Wu <lepton@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> Auto-Submit: Lepton Wu <lepton@chromium.org> Reviewed-by: Chirantan Ekbote <chirantan@chromium.org>
2020-07-16 06:20:54 +00:00
fstat: 1
Expand video sandboxing for AMD devices BUG=b:170062417 TEST=tast run grunt-DUT arc.Boot.vm and no resource bridge logspam Change-Id: I84e185c4507b8df6b09505a369f09933d3d6143f Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/2461149 Reviewed-by: Alexandre Courbot <acourbot@chromium.org> Reviewed-by: Keiichi Watanabe <keiichiw@chromium.org> Tested-by: David Stevens <stevensd@chromium.org> Commit-Queue: David Stevens <stevensd@chromium.org>
2020-10-08 09:02:32 +00:00
# Rules needed for minigbm on AMD devices.
getrandom: 1
lstat: 1
# mmap/mprotect differ from the common_device.policy
mmap: arg2 == PROT_READ|PROT_WRITE || arg2 == PROT_NONE || arg2 == PROT_READ|PROT_EXEC || arg2 == PROT_WRITE || arg2 == PROT_READ
mprotect: arg2 == PROT_READ|PROT_WRITE || arg2 == PROT_NONE || arg2 == PROT_READ
readlink: 1
sched_setaffinity: 1
sched_setscheduler: arg1 == SCHED_IDLE
uname: 1
Reference in a new issue Copy permalink