3 commits

Author	SHA1	Message	Date
Chirantan Ekbote	a00991cd84	Replace dup with fcntl(F_DUPFD_CLOEXEC) ... Fds created via dup don't share file descriptor flags with the original fd, which means that they don't have the FD_CLOEXEC flag set. Use fcntl(F_DUPFD_CLOEXEC) so that this flag gets set for the duplicated fds as well. BUG=none TEST=unit tests Change-Id: Ib471cf40acac1eacf72969ba45247f50b349ed58 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/2809687 Tested-by: kokoro <noreply+kokoro@google.com> Commit-Queue: Chirantan Ekbote <chirantan@chromium.org> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Reviewed-by: Zach Reizner <zachr@chromium.org>	2021-04-15 10:34:04 +00:00
Matt Delco	8488a0bbbb	seccomp: remove redundant unconditional arm/arm64 rules ... Minijail's policy compiler complains when there's multiple unconditional rules for a syscall. In most cases the rules are redundant to common_device.policy. BUG=None TEST=Ran compile_seccomp_policy.py until it stopped complaining. Change-Id: Ic43d1fd13f9c012641d71e526942229eb8b08ed4 Signed-off-by: Matt Delco <delco@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/2034024 Tested-by: kokoro <noreply+kokoro@google.com> Reviewed-by: Dylan Reid <dgreid@chromium.org>	2020-02-04 23:27:21 +00:00
Stephen Boyd	cef1079c20	seccomp: Add initial arm64 seccomp filters ... BUG=chromium:1029666 TEST=tast run crostini.LaunchTerminal.download_buster Change-Id: I8fa7dc9df4d5f0144aed80fcd60307036fc7e16d Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/1946765 Reviewed-by: Stephen Barber <smbarber@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> Tested-by: Stephen Barber <smbarber@chromium.org> Commit-Queue: Stephen Barber <smbarber@chromium.org>	2019-12-06 19:06:34 +00:00