crosvm/seccomp
Matt Delco 4389dab579 seccomp: remove redundant unconditional rules
Minijail's policy compiler complains when there's multiple
unconditional rules for a syscall.  In most cases the rules
are redundant to common_device.policy.  I don't know what
to do about the intentionally contradictory rules for open
and openat, other than to remove then from the common device
policy and add it to all the others.

BUG=None
TEST=Ran compile_seccomp_policy.py until it stopped
complaining.

Change-Id: I6813dd1e0b39e975415662bd7de74c25a1be9eb3
Signed-off-by: Matt Delco <delco@chromium.org>
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/1918607
Tested-by: kokoro <noreply+kokoro@google.com>
Reviewed-by: Dylan Reid <dgreid@chromium.org>
2020-01-22 17:36:36 +00:00
..
aarch64 seccomp: allow statx syscall where stat/fstat was allowed 2020-01-17 23:04:03 +00:00
arm seccomp: allow statx syscall where stat/fstat was allowed 2020-01-17 23:04:03 +00:00
x86_64 seccomp: remove redundant unconditional rules 2020-01-22 17:36:36 +00:00