crosvm/seccomp/arm
David Tolnay 25a86d99cc tpm: Update tpm device policy to support libtpm2
Tested by running the following on a grunt board (Barla) in dev mode
together with CL:1496910:

    sudo crosvm run \
        --root rootfs.ext4 \
        --socket crosvm.sock \
        --seccomp-policy-dir seccomp \
        --software-tpm \
        -p init=/bin/bash \
        -p panic=-1 \
        vmlinux.bin

and confirming that /dev/tpm0 and /dev/tpmrm0 are present in the VM.

I needed to override the common device policy's `open` and `openat` and
was not able to get that working with the existing @include.

Note: untested on arm.

BUG=chromium:921841
TEST=manual testing on grunt

Change-Id: Ied7f18a631ce8c0ae280f8b6c01511ca20c3d1c8
Reviewed-on: https://chromium-review.googlesource.com/1496909
Commit-Ready: David Tolnay <dtolnay@chromium.org>
Tested-by: David Tolnay <dtolnay@chromium.org>
Tested-by: kokoro <noreply+kokoro@google.com>
Reviewed-by: Zach Reizner <zachr@chromium.org>
2019-03-02 17:41:26 -08:00
..
9p_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00
balloon_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00
block_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00
common_device.policy crosvm: use seqpacket rather than datagram sockets 2019-02-28 03:24:24 -08:00
cras_audio_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00
input_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00
net_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00
null_audio_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00
rng_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00
tpm_device.policy tpm: Update tpm device policy to support libtpm2 2019-03-02 17:41:26 -08:00
vhost_net_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00
vhost_vsock_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00
wl_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00