mirrors/crosvm
1
0
Fork 0
mirror of https://chromium.googlesource.com/crosvm/crosvm synced 2025-01-12 08:40:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

wl: fix seccomp filter for memfd_create

Browse source 
The memfd_create flags changed with "add memfd seal support", which
breaks the seccomp filter for the wayland device.

TEST=run a wayland app in crosvm
BUG=chromium:799523

Change-Id: I266e305bc3179a7b9fd105a684de92e944fe1fc6
Reviewed-on: https://chromium-review.googlesource.com/852937
Commit-Ready: Zach Reizner <zachr@chromium.org>
Tested-by: Zach Reizner <zachr@chromium.org>
Reviewed-by: Stephen Barber <smbarber@chromium.org>
This commit is contained in:
Zach Reizner 2018-01-05 19:59:54 -08:00 committed by chrome-bot
parent 293c61cf11
commit a0ce5322f7
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
seccomp/x86_64/wl_device.policy
View file

@ -28,8 +28,8 @@ connect: arg2 == 13
# Used to communicate with wayland # Used to communicate with wayland
recvmsg: 1 recvmsg: 1
sendmsg: 1 sendmsg: 1
# Used for sharing memory with wayland. arg1 == MFD_CLOEXEC # Used for sharing memory with wayland. arg1 == MFD_CLOEXEC|MFD_ALLOW_SEALING
memfd_create: arg1 == 1 memfd_create: arg1 == 3
# Used to set of size new memfd # Used to set of size new memfd
ftruncate: 1 ftruncate: 1
# Used to determine shm size after recvmsg with fd # Used to determine shm size after recvmsg with fd