mirrors/crosvm
1
0
Fork 0
mirror of https://chromium.googlesource.com/crosvm/crosvm synced 2025-02-10 12:09:31 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
crosvm/seccomp/x86_64/block_device.policy

9 lines
320 B
Text
Raw Normal View History

Update all copyright headers to match new style This search/replace updates all copyright notices to drop the "All rights reserved", Use "ChromiumOS" instead of "Chromium OS" and drops the trailing dots. This fulfills the request from legal and unifies our notices. ./tools/health-check has been updated to only accept this style. BUG=b:246579983 TEST=./tools/health-check Change-Id: I87a80701dc651f1baf4820e5cc42469d7c5f5bf7 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/3894243 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Commit-Queue: Dennis Kempin <denniskempin@google.com>
2022-09-13 17:55:17 +00:00
# Copyright 2022 The ChromiumOS Authors
Put seccomp policy files in a common directory We will almost certainly require different seccomp policy files for different architectures. Move all the existing secommp policy files into a common directory grouped by architecture. This will make it easier to install them via the ebuild later. BUG=none TEST=none Change-Id: I0495789cd4143dc374ee6ebe083dc20ce724edbb Signed-off-by: Chirantan Ekbote <chirantan@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/630058 Reviewed-by: Zach Reizner <zachr@chromium.org> Reviewed-by: Dylan Reid <dgreid@chromium.org>
2017-08-23 18:20:36 +00:00
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
crosvm: add block support to "devices" command Add support for creating block devices using the `crosvm devices` command. Due to conflicting seccomp policies between vhost-user transport and the block device, we need to temporarily remove some lines from vhost_user.policy and vvu.policy and reproduce them in the serial device's policy. This will be handled properly later using a new seccomp policy parser. BUG=b:217480043 TEST=`crosvm devices --block vhost=/tmp/vu-block,path=disk.img` results in a working vhost-user block device. TEST=`crosvm devices --block vhost=0000:00:10.0,path=disk.img` results in a working VVU block device. TEST=regular virtio block device is usable as jailed root device. Change-Id: Ide62adbf81390eb39cd10f3d2880e2c065982d05 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/3765000 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Commit-Queue: Alexandre Courbot <acourbot@chromium.org> Tested-by: Alexandre Courbot <acourbot@chromium.org> Reviewed-by: Keiichi Watanabe <keiichiw@chromium.org>
2022-07-12 07:50:56 +00:00
# Policy file for a block device used as a regular, in-VMM virtio device.
seccomp: refactor policy into common_device.policy CQ-DEPEND=CL:1449895 BUG=None TEST=vmc start termina Change-Id: Ia3edaafc1d2958bd40e6b1adc89dd5e29b679b06 Reviewed-on: https://chromium-review.googlesource.com/1448292 Commit-Ready: Zach Reizner <zachr@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> Tested-by: Zach Reizner <zachr@chromium.org> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
2019-02-01 00:55:59 +00:00
crosvm: add block support to "devices" command Add support for creating block devices using the `crosvm devices` command. Due to conflicting seccomp policies between vhost-user transport and the block device, we need to temporarily remove some lines from vhost_user.policy and vvu.policy and reproduce them in the serial device's policy. This will be handled properly later using a new seccomp policy parser. BUG=b:217480043 TEST=`crosvm devices --block vhost=/tmp/vu-block,path=disk.img` results in a working vhost-user block device. TEST=`crosvm devices --block vhost=0000:00:10.0,path=disk.img` results in a working VVU block device. TEST=regular virtio block device is usable as jailed root device. Change-Id: Ide62adbf81390eb39cd10f3d2880e2c065982d05 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/3765000 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Commit-Queue: Alexandre Courbot <acourbot@chromium.org> Tested-by: Alexandre Courbot <acourbot@chromium.org> Reviewed-by: Keiichi Watanabe <keiichiw@chromium.org>
2022-07-12 07:50:56 +00:00
@include /usr/share/policy/crosvm/common_device.policy
@include /usr/share/policy/crosvm/block.policy
Reference in a new issue Copy permalink