crosvm/seccomp/arm
Adrian Ratiu 1a7a822858 seccomp: allow rseq syscall
Starting with v4.18, the Linux kernel provides the rseq
syscall which is a mechanism for fast userspace task
synchronization.

Starting with v2.35 glibc uses the new syscall, if it
exists, to gain some performance improvements, so we
need to update the policy files to allow it.

Even on older kernels where rseq is not supported,
glibc will still probe for its existence by expecting
an -ENOSYS response.

BUG=b:235960683
TEST=Local builds against glibc 2.35

Change-Id: I704f2fbf2b058c3a4c3269c7441c3a7324012f8a
Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/3763901
Commit-Queue: Manoj Gupta <manojgupta@chromium.org>
Owners-Override: Dominick Ng <dominickn@google.com>
Reviewed-by: Allen Webb <allenwebb@google.com>
Reviewed-by: Dennis Kempin <denniskempin@google.com>
Tested-by: Manoj Gupta <manojgupta@chromium.org>
2022-07-15 16:19:21 +00:00
..
9p_device.policy
balloon_device.policy
battery.policy seccomp: add arm policy for Goldfish battery 2022-06-27 13:32:27 +00:00
block_device.policy seccomp: allow fstatat64/statx syscalls on arm 2021-08-26 20:59:21 +00:00
coiommu_device.policy seccomp: define naming rules for policy files 2022-06-17 04:35:09 +00:00
common_device.policy seccomp: allow rseq syscall 2022-07-15 16:19:21 +00:00
cras_audio_device.policy Remove madvise from *_audio_device.policy. 2022-06-22 23:08:02 +00:00
fs_device.policy seccomp: add getcwd and readlink to common policy for panic 2021-12-02 23:18:03 +00:00
gpu_common.policy seccomp: allow rseq syscall 2022-07-15 16:19:21 +00:00
gpu_device.policy gpu: allow syslog from the render server 2021-12-14 16:54:22 +00:00
gpu_render_server.policy gpu_render_server: allow syslog and signalfd again 2021-12-22 06:01:25 +00:00
input_device.policy
net_device.policy
null_audio_device.policy Remove madvise from *_audio_device.policy. 2022-06-22 23:08:02 +00:00
pmem_device.policy
rng_device.policy devices: Update rng devices to be platform agnostic 2022-05-25 01:35:13 +00:00
serial.policy seccomp: define naming rules for policy files 2022-06-17 04:35:09 +00:00
serial_device.policy seccomp: define naming rules for policy files 2022-06-17 04:35:09 +00:00
snd_cras_device.policy audio: Support null backend for VirtioSnd 2022-07-14 13:44:57 +00:00
snd_null_device.policy audio: Support null backend for VirtioSnd 2022-07-14 13:44:57 +00:00
tpm_device.policy seccomp: use common_device.policy in tpm_device.policy 2022-02-23 19:23:31 +00:00
vhost_net_device.policy
vhost_vsock_device.policy
video_device.policy seccomp: Allow statx for video device on arm 2021-11-18 08:50:57 +00:00
vios_audio_device.policy
wl_device.policy wl: update seccomp policies for SYNC_IOC_FILE_INFO on arm 2021-11-11 19:31:37 +00:00
xhci_device.policy seccomp: define naming rules for policy files 2022-06-17 04:35:09 +00:00