crosvm/seccomp/x86_64/block.policy

# Copyright 2022 The ChromiumOS Authors
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.

fallocate: 1
fdatasync: 1
fstat: 1
fsync: 1
ftruncate: 1
open: return ENOENT
openat: return ENOENT
newfstatat: 1
pread64: 1
preadv: 1
pwrite64: 1
pwritev: 1
statx: 1
timerfd_create: 1
timerfd_gettime: 1
timerfd_settime: 1
prctl: arg0 == PR_SET_NAME || arg0 == PR_SET_PDEATHSIG
Update all copyright headers to match new style This search/replace updates all copyright notices to drop the "All rights reserved", Use "ChromiumOS" instead of "Chromium OS" and drops the trailing dots. This fulfills the request from legal and unifies our notices. ./tools/health-check has been updated to only accept this style. BUG=b:246579983 TEST=./tools/health-check Change-Id: I87a80701dc651f1baf4820e5cc42469d7c5f5bf7 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/3894243 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Commit-Queue: Dennis Kempin <denniskempin@google.com> 2022-09-13 17:55:17 +00:00			`# Copyright 2022 The ChromiumOS Authors`
crosvm: add block support to "devices" command Add support for creating block devices using the `crosvm devices` command. Due to conflicting seccomp policies between vhost-user transport and the block device, we need to temporarily remove some lines from vhost_user.policy and vvu.policy and reproduce them in the serial device's policy. This will be handled properly later using a new seccomp policy parser. BUG=b:217480043 TEST=`crosvm devices --block vhost=/tmp/vu-block,path=disk.img` results in a working vhost-user block device. TEST=`crosvm devices --block vhost=0000:00:10.0,path=disk.img` results in a working VVU block device. TEST=regular virtio block device is usable as jailed root device. Change-Id: Ide62adbf81390eb39cd10f3d2880e2c065982d05 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/3765000 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Commit-Queue: Alexandre Courbot <acourbot@chromium.org> Tested-by: Alexandre Courbot <acourbot@chromium.org> Reviewed-by: Keiichi Watanabe <keiichiw@chromium.org> 2022-07-12 07:50:56 +00:00			`# Use of this source code is governed by a BSD-style license that can be`
			`# found in the LICENSE file.`

			`fallocate: 1`
			`fdatasync: 1`
			`fstat: 1`
			`fsync: 1`
			`ftruncate: 1`
			`open: return ENOENT`
			`openat: return ENOENT`
			`newfstatat: 1`
			`pread64: 1`
			`preadv: 1`
			`pwrite64: 1`
			`pwritev: 1`
			`statx: 1`
			`timerfd_create: 1`
			`timerfd_gettime: 1`
			`timerfd_settime: 1`
			`prctl: arg0 == PR_SET_NAME \|\| arg0 == PR_SET_PDEATHSIG`