Adrian Ratiu 1a7a822858 seccomp: allow rseq syscall ... Starting with v4.18, the Linux kernel provides the rseq syscall which is a mechanism for fast userspace task synchronization. Starting with v2.35 glibc uses the new syscall, if it exists, to gain some performance improvements, so we need to update the policy files to allow it. Even on older kernels where rseq is not supported, glibc will still probe for its existence by expecting an -ENOSYS response. BUG=b:235960683 TEST=Local builds against glibc 2.35 Change-Id: I704f2fbf2b058c3a4c3269c7441c3a7324012f8a Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/3763901 Commit-Queue: Manoj Gupta <manojgupta@chromium.org> Owners-Override: Dominick Ng <dominickn@google.com> Reviewed-by: Allen Webb <allenwebb@google.com> Reviewed-by: Dennis Kempin <denniskempin@google.com> Tested-by: Manoj Gupta <manojgupta@chromium.org>		2022-07-15 16:19:21 +00:00
..
9p_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
balloon_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
battery.policy	seccomp: add getcwd and readlink to common policy for panic	2021-12-02 23:18:03 +00:00
block_device.policy	seccomp: allow newfstatat in more amd64/arm64 policies	2021-10-01 17:09:16 +00:00
coiommu_device.policy	seccomp: define naming rules for policy files	2022-06-17 04:35:09 +00:00
common_device.frequency
common_device.policy	seccomp: allow rseq syscall	2022-07-15 16:19:21 +00:00
cras_audio_device.policy	Remove madvise from *_audio_device.policy.	2022-06-22 23:08:02 +00:00
fs_device.policy	seccomp: add getcwd and readlink to common policy for panic	2021-12-02 23:18:03 +00:00
gpu_common.policy	seccomp: allow rseq syscall	2022-07-15 16:19:21 +00:00
gpu_device.policy	gpu: allow syslog from the render server	2021-12-14 16:54:22 +00:00
gpu_render_server.policy	gpu_render_server: allow syslog and signalfd again	2021-12-22 06:01:25 +00:00
input_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
iommu_device.policy	devices: virtio: iommu: enable virtio IOMMU driver	2021-07-09 05:49:26 +00:00
net_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
null_audio_device.policy	Remove madvise from *_audio_device.policy.	2022-06-22 23:08:02 +00:00
pmem_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
rng_device.policy	devices: Update rng devices to be platform agnostic	2022-05-25 01:35:13 +00:00
serial.policy	seccomp: define naming rules for policy files	2022-06-17 04:35:09 +00:00
serial_device.policy	seccomp: define naming rules for policy files	2022-06-17 04:35:09 +00:00
snd_cras_device.policy	audio: Support null backend for VirtioSnd	2022-07-14 13:44:57 +00:00
snd_null_device.policy	audio: Support null backend for VirtioSnd	2022-07-14 13:44:57 +00:00
tpm_device.policy	seccomp: use common_device.policy in tpm_device.policy	2022-02-23 19:23:31 +00:00
vfio_device.policy	seccomp: add getcwd and readlink to common policy for panic	2021-12-02 23:18:03 +00:00
vhost_net_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
vhost_vsock_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
video_device.policy	seccomp: add rseq to all policy files	2022-07-14 22:45:21 +00:00
vios_audio_device.policy	seccomp: allow clock_gettime in all devices	2022-02-22 23:15:48 +00:00
vtpm_proxy_device.policy	Add vtpm_proxy into crosvm	2022-06-20 03:41:33 +00:00
vvu_proxy_device.policy	crosvm: vvu: proxy: Implement instantiating a VVU proxy device	2022-01-14 04:21:21 +00:00
wl_device.policy	wl: add support for host fences	2021-11-04 01:24:37 +00:00
xhci_device.policy	seccomp: define naming rules for policy files	2022-06-17 04:35:09 +00:00