From 19ad688208187434e4b60dfaf49bb8519ace91d5 Mon Sep 17 00:00:00 2001 From: Manoj Gupta Date: Mon, 15 Mar 2021 10:35:07 -0700 Subject: [PATCH] add getdents64 to policies glibc 2.32 is using getdents64 syscall instead of getdents. So add getdents64 to policies that already have getdents. BUG=chromium:1171287 TEST=CQ Change-Id: Icbe1da7cbf669432c8160779a9cbfdeb04db57c0 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/2760299 Tested-by: Manoj Gupta Tested-by: kokoro Auto-Submit: Manoj Gupta Reviewed-by: Dylan Reid Commit-Queue: Manoj Gupta --- seccomp/x86_64/gpu_device.policy | 1 + seccomp/x86_64/video_device.policy | 1 + seccomp/x86_64/xhci.policy | 1 + 3 files changed, 3 insertions(+) diff --git a/seccomp/x86_64/gpu_device.policy b/seccomp/x86_64/gpu_device.policy index 28dcf60da8..425c71de1e 100644 --- a/seccomp/x86_64/gpu_device.policy +++ b/seccomp/x86_64/gpu_device.policy @@ -54,6 +54,7 @@ fstat: 1 # Used to set of size new memfd. ftruncate: 1 getdents: 1 +getdents64: 1 geteuid: 1 getrandom: 1 getuid: 1 diff --git a/seccomp/x86_64/video_device.policy b/seccomp/x86_64/video_device.policy index e43900ae1a..56d12d9b94 100644 --- a/seccomp/x86_64/video_device.policy +++ b/seccomp/x86_64/video_device.policy @@ -9,6 +9,7 @@ clock_getres: 1 connect: 1 fcntl: arg1 == F_GETFL || arg1 == F_SETFL || arg1 == F_DUPFD_CLOEXEC || arg1 == F_GETFD || arg1 == F_SETFD getdents: 1 +getdents64: 1 getegid: 1 geteuid: 1 getgid: 1 diff --git a/seccomp/x86_64/xhci.policy b/seccomp/x86_64/xhci.policy index a548d9ea0b..702aa33dc0 100644 --- a/seccomp/x86_64/xhci.policy +++ b/seccomp/x86_64/xhci.policy @@ -39,4 +39,5 @@ ioctl: arg1 == 0xc0185500 || arg1 == 0x41045508 || arg1 == 0x8004550f || arg1 == fstat: 1 getrandom: 1 getdents: 1 +getdents64: 1 lseek: 1