From a946256c0b1b4644d413ae51388f68de0a724b47 Mon Sep 17 00:00:00 2001 From: Chia-I Wu Date: Fri, 10 Dec 2021 17:27:43 -0800 Subject: [PATCH] seccomp: allow waitid in gpu_renderer_server virglrender changed from waitpid to waitid. BUG=b:177267762 TEST=run vk and gl apps on volteer Change-Id: If056776d934e0c2376d316dcfe37ff2c168933f3 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3331738 Reviewed-by: Chirantan Ekbote Tested-by: kokoro Commit-Queue: Chia-I Wu --- seccomp/aarch64/gpu_render_server.policy | 4 ++-- seccomp/arm/gpu_render_server.policy | 4 ++-- seccomp/x86_64/gpu_render_server.policy | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/seccomp/aarch64/gpu_render_server.policy b/seccomp/aarch64/gpu_render_server.policy index 3bf11cb3cb..5561bc6775 100644 --- a/seccomp/aarch64/gpu_render_server.policy +++ b/seccomp/aarch64/gpu_render_server.policy @@ -4,9 +4,9 @@ @include /usr/share/policy/crosvm/gpu_common.policy -# allow fork() and waitpid() +# allow fork() and waitid() clone: 1 -wait4: 1 +waitid: 1 # allow socketpair(AF_UNIX, SOCK_SEQPACKET | SOCK_CLOEXEC) socketpair: arg0 == AF_UNIX && arg1 == SOCK_SEQPACKET|SOCK_CLOEXEC && arg2 == 0 diff --git a/seccomp/arm/gpu_render_server.policy b/seccomp/arm/gpu_render_server.policy index 3bf11cb3cb..5561bc6775 100644 --- a/seccomp/arm/gpu_render_server.policy +++ b/seccomp/arm/gpu_render_server.policy @@ -4,9 +4,9 @@ @include /usr/share/policy/crosvm/gpu_common.policy -# allow fork() and waitpid() +# allow fork() and waitid() clone: 1 -wait4: 1 +waitid: 1 # allow socketpair(AF_UNIX, SOCK_SEQPACKET | SOCK_CLOEXEC) socketpair: arg0 == AF_UNIX && arg1 == SOCK_SEQPACKET|SOCK_CLOEXEC && arg2 == 0 diff --git a/seccomp/x86_64/gpu_render_server.policy b/seccomp/x86_64/gpu_render_server.policy index 3bf11cb3cb..5561bc6775 100644 --- a/seccomp/x86_64/gpu_render_server.policy +++ b/seccomp/x86_64/gpu_render_server.policy @@ -4,9 +4,9 @@ @include /usr/share/policy/crosvm/gpu_common.policy -# allow fork() and waitpid() +# allow fork() and waitid() clone: 1 -wait4: 1 +waitid: 1 # allow socketpair(AF_UNIX, SOCK_SEQPACKET | SOCK_CLOEXEC) socketpair: arg0 == AF_UNIX && arg1 == SOCK_SEQPACKET|SOCK_CLOEXEC && arg2 == 0