Alexandre Courbot c553d1c283 seccomp: define naming rules for policy files ... We are going to use separate policy files per device for the following scenarios: 1) Regular in-VMM virtio device, 2) Virtio device over vhost-user, 3) Virtio device over Vvu. Each of these scenarios require slightly different policies as a jailed device process needs to allow not only the system calls necessary for the device to function, but also those required by the virtio transport in use. This CL adds a README.md file to the seccomp directory that details the naming and policy inclusion rules, and updates the serial, xhci and coiommu policies to follow the naming scheme. Vhost-user and VVU policy files will be added along with support for jailing devices when they are in use. BUG=b:217480043 TEST=serial device works with `crosvm run`. Change-Id: I6d454aa6e05d00691fe3346e822ed1fc7b24aed8 Signed-off-by: Alexandre Courbot <acourbot@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3706490 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com>		2022-06-17 04:35:09 +00:00
..
9p_device.policy
balloon_device.policy
battery.policy	aarch64: Add Goldfish battery to aarch64 crosvm	2022-06-15 02:46:45 +00:00
block_device.policy
coiommu_device.policy	seccomp: define naming rules for policy files	2022-06-17 04:35:09 +00:00
common_device.policy	Revert "Add rseq to the seccomp policy file on aarch64."	2022-06-07 04:30:15 +00:00
cras_audio_device.policy
cras_snd_device.policy
fs_device.policy
gpu_common.policy	seccomp: Add io_uring_setup / io_uring_enter to gpu_common.policy	2022-05-06 22:09:01 +00:00
gpu_device.policy
gpu_render_server.policy
input_device.policy
net_device.policy
null_audio_device.policy	audio: Add lseek in null_audio_device policy	2022-05-30 03:20:47 +00:00
pmem_device.policy
rng_device.policy	devices: Update rng devices to be platform agnostic	2022-05-25 01:35:13 +00:00
serial.policy	seccomp: define naming rules for policy files	2022-06-17 04:35:09 +00:00
serial_device.policy	seccomp: define naming rules for policy files	2022-06-17 04:35:09 +00:00
tpm_device.policy	seccomp: use common_device.policy in tpm_device.policy	2022-02-23 19:23:31 +00:00
vhost_net_device.policy
vhost_vsock_device.policy
video_device.policy	seccomp: Fixes needed for aarch64 to allow arcvm to start	2022-04-29 00:05:48 +00:00
vios_audio_device.policy
wl_device.policy
xhci_device.policy	seccomp: define naming rules for policy files	2022-06-17 04:35:09 +00:00