mirrors/crosvm
1
0
Fork 0
mirror of https://chromium.googlesource.com/crosvm/crosvm synced 2024-12-25 04:14:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

crosvm: aarch64: whitelist gettimeofday for error messages

Browse source 
It looks like on ARM we use the real gettimeofday system call when
we're outputting error messages, so we need to whitelist this to avoid
crashing instead of seeing the error messages.

BUG=chromium:843807
TEST=run vm_CrosVmStart and make sure there are no crashes for crosvm

Change-Id: I9f47da8dabe31f0677bcaa1d431e56545e20c9c9
Reviewed-on: https://chromium-review.googlesource.com/1081390
Commit-Ready: ChromeOS CL Exonerator Bot <chromiumos-cl-exonerator@appspot.gserviceaccount.com>
Tested-by: Sonny Rao <sonnyrao@chromium.org>
Reviewed-by: Stephen Barber <smbarber@chromium.org>
This commit is contained in:
Sonny Rao 2018-05-31 17:35:02 -07:00 committed by chrome-bot
parent 5f5e7ec3ba
commit 90c50419d4
7 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
seccomp/aarch64/balloon_device.policy
View file

@ -5,6 +5,7 @@
close: 1
exit_group: 1
futex: 1
gettimeofday: 1
madvise: 1
# Disallow mmap with PROT_EXEC set. The syntax here doesn't allow bit
# negation, thus the manually negated mask constant.

1
seccomp/aarch64/block_device.policy
View file

@ -11,6 +11,7 @@ fstat64: 1
fsync: 1
ftruncate64: 1
futex: 1
gettimeofday: 1
_llseek: 1
# Disallow mmap with PROT_EXEC set. The syntax here doesn't allow bit
# negation, thus the manually negated mask constant.

1
seccomp/aarch64/net_device.policy
View file

@ -7,6 +7,7 @@ dup: 1
dup2: 1
exit_group: 1
futex: 1
gettimeofday: 1
# Disallow mmap with PROT_EXEC set. The syntax here doesn't allow bit
# negation, thus the manually negated mask constant.
mmap2: arg2 in 0xfffffffb

1
seccomp/aarch64/rng_device.policy
View file

@ -7,6 +7,7 @@ dup: 1
dup2: 1
exit_group: 1
futex: 1
gettimeofday: 1
# Disallow mmap with PROT_EXEC set. The syntax here doesn't allow bit
# negation, thus the manually negated mask constant.
mmap2: arg2 in 0xfffffffb

1
seccomp/aarch64/vhost_net_device.policy
View file

@ -7,6 +7,7 @@ dup: 1
dup2: 1
exit_group: 1
futex: 1
gettimeofday: 1
# Whitelist vhost_net ioctls only.
# arg1 == VHOST_GET_FEATURES ||
# arg1 == VHOST_SET_FEATURES ||

1
seccomp/aarch64/vhost_vsock_device.policy
View file

@ -7,6 +7,7 @@ dup: 1
dup2: 1
exit_group: 1
futex: 1
gettimeofday: 1
# Whitelist vhost_vsock ioctls only.
# arg1 == VHOST_GET_FEATURES ||
# arg1 == VHOST_SET_FEATURES ||

1
seccomp/aarch64/wl_device.policy
View file

@ -6,6 +6,7 @@ close: 1
dup: 1
dup2: 1
getpid: 1
gettimeofday: 1
exit_group: 1
futex: 1
# Disallow mmap with PROT_EXEC set. The syntax here doesn't allow bit