mirrors/crosvm
1
0
Fork 0
mirror of https://chromium.googlesource.com/crosvm/crosvm synced 2025-02-10 12:09:31 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
crosvm/seccomp/x86_64/wl_device.policy

12 lines
541 B
Text
Raw Normal View History

Update all copyright headers to match new style This search/replace updates all copyright notices to drop the "All rights reserved", Use "ChromiumOS" instead of "Chromium OS" and drops the trailing dots. This fulfills the request from legal and unifies our notices. ./tools/health-check has been updated to only accept this style. BUG=b:246579983 TEST=./tools/health-check Change-Id: I87a80701dc651f1baf4820e5cc42469d7c5f5bf7 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/3894243 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Commit-Queue: Dennis Kempin <denniskempin@google.com>
2022-09-13 17:55:17 +00:00
# Copyright 2018 The ChromiumOS Authors
virtwl: implement dmabuf sync support This provides proper synchronization for guest access to DMABufs. Virtio wayland device is given access to the DMA_BUF_SYNC ioctl in order to implement this. Being able to use this directly in the virtio wayland device process is important as these calls can sometimes be relatively expensive and they are frequent enough that avoiding another context switch is useful for good performance. TEST=cache-line artifacts no longer noticeable BUG=chromium:837209 Change-Id: Ibb8d7c01f70ed5b74afd69288015a65186fec52a Reviewed-on: https://chromium-review.googlesource.com/1076928 Commit-Ready: David Reveman <reveman@chromium.org> Tested-by: David Reveman <reveman@chromium.org> Reviewed-by: Zach Reizner <zachr@chromium.org>
2018-05-23 10:41:30 +00:00
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
devices: wl: initialize gralloc after sandboxing Initializing gralloc may spawn threads, so it needs to be done after sandboxing the wl device. Initializing gralloc requires expanding the wl device's sandbox. Rather than trying to maintain a new dedicated minijail configuration for wl, reuse the gpu's configuration. This should be sufficient, since virglrenderer has to open minigbm within the sandboxed gpu process. BUG=None TEST=ARCVM and crostini GUI on volteer, zorc-arc-r, grunt-arc-r Change-Id: I291fb59c665a8ba65058a6f55dee959c839bb43c Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/3787936 Commit-Queue: David Stevens <stevensd@chromium.org> Reviewed-by: Ryan Neph <ryanneph@google.com> Tested-by: David Stevens <stevensd@chromium.org>
2022-07-26 08:00:47 +00:00
@include /usr/share/policy/crosvm/gpu_common.policy
seccomp: refactor policy into common_device.policy CQ-DEPEND=CL:1449895 BUG=None TEST=vmc start termina Change-Id: Ia3edaafc1d2958bd40e6b1adc89dd5e29b679b06 Reviewed-on: https://chromium-review.googlesource.com/1448292 Commit-Ready: Zach Reizner <zachr@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> Tested-by: Zach Reizner <zachr@chromium.org> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
2019-02-01 00:55:59 +00:00
devices: wl: initialize gralloc after sandboxing Initializing gralloc may spawn threads, so it needs to be done after sandboxing the wl device. Initializing gralloc requires expanding the wl device's sandbox. Rather than trying to maintain a new dedicated minijail configuration for wl, reuse the gpu's configuration. This should be sufficient, since virglrenderer has to open minigbm within the sandboxed gpu process. BUG=None TEST=ARCVM and crostini GUI on volteer, zorc-arc-r, grunt-arc-r Change-Id: I291fb59c665a8ba65058a6f55dee959c839bb43c Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/3787936 Commit-Queue: David Stevens <stevensd@chromium.org> Reviewed-by: Ryan Neph <ryanneph@google.com> Tested-by: David Stevens <stevensd@chromium.org>
2022-07-26 08:00:47 +00:00
clone: arg0 & CLONE_THREAD
crosvm: add virtio wayland device This adds the virtio wayland device which is activated by default. The wayland device needs the XDG_RUNTIME_DIR env variable to be set and a running wayland compositor to connect to in that directory. TEST=crosvm run <other args> BUG=chromium:738638 Change-Id: Iaa417c6bb74739896042318451b4befcac0c1d0e Reviewed-on: https://chromium-review.googlesource.com/559860 Commit-Ready: Zach Reizner <zachr@chromium.org> Tested-by: Zach Reizner <zachr@chromium.org> Reviewed-by: Dylan Reid <dgreid@chromium.org>
2017-06-30 22:46:14 +00:00
# Used to connect to wayland. arg0 == AF_UNIX && arg1 == SOCK_STREAM|SOCK_CLOEXEC
socket: arg0 == 1 && arg1 == 0x80001 && arg2 == 0
wl: allocate dma-bufs in process Directly allocate dma-bufs within the virtio-wl process and remove the VmMemoryRequest::AllocateAndRegisterGpuMemory type. This is preparation for migrating to the SharedMemoryMapper interface. BUG=b:201745804 TEST=Launch arcvm, launch gedit w/crostini, launch gedit w/vhost-user-wl Change-Id: I232f1fd3dfdb8d7ed068c6b3c2ea23f35d0ddabc Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/3765012 Reviewed-by: Keiichi Watanabe <keiichiw@chromium.org> Reviewed-by: Ryan Neph <ryanneph@google.com> Tested-by: David Stevens <stevensd@chromium.org> Reviewed-by: Alexandre Courbot <acourbot@chromium.org> Commit-Queue: David Stevens <stevensd@chromium.org>
2022-07-08 04:18:43 +00:00
# arg1 == FIONBIO || arg1 == DMA_BUF_IOCTL_SYNC || arg1 == SYNC_IOC_FILE_INFO || arg1 & DRM_IOCTL_BASE
ioctl: arg1 == 0x5421 || arg1 == 0x40086200 || arg1 == 0xc0383e04 || arg1 & 0x6400
Reference in a new issue Copy permalink