crosvm/seccomp/x86_64
David Stevens 01e2724335 devices: wl: initialize gralloc after sandboxing
Initializing gralloc may spawn threads, so it needs to be done after
sandboxing the wl device. Initializing gralloc requires expanding the
wl device's sandbox. Rather than trying to maintain a new dedicated
minijail configuration for wl, reuse the gpu's configuration. This
should be sufficient, since virglrenderer has to open minigbm within the
sandboxed gpu process.

BUG=None
TEST=ARCVM and crostini GUI on volteer, zorc-arc-r, grunt-arc-r

Change-Id: I291fb59c665a8ba65058a6f55dee959c839bb43c
Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/3787936
Commit-Queue: David Stevens <stevensd@chromium.org>
Reviewed-by: Ryan Neph <ryanneph@google.com>
Tested-by: David Stevens <stevensd@chromium.org>
2022-07-27 01:54:48 +00:00
..
9p_device.policy
balloon_device.policy
battery.policy
block_device.policy
coiommu_device.policy seccomp: define naming rules for policy files 2022-06-17 04:35:09 +00:00
common_device.frequency
common_device.policy seccomp: add rseq to x86_64 common_device.policy 2022-07-15 20:55:46 +00:00
cras_audio_device.policy Remove madvise from *_audio_device.policy. 2022-06-22 23:08:02 +00:00
fs_device.policy
gpu_common.policy Revert "seccomp: allow rseq syscall" 2022-07-15 20:45:46 +00:00
gpu_device.policy gpu: allow syslog from the render server 2021-12-14 16:54:22 +00:00
gpu_render_server.policy gpu_render_server: allow syslog and signalfd again 2021-12-22 06:01:25 +00:00
input_device.policy
iommu_device.policy
net_device.policy
null_audio_device.policy Remove madvise from *_audio_device.policy. 2022-06-22 23:08:02 +00:00
pmem_device.policy
rng_device.policy devices: Update rng devices to be platform agnostic 2022-05-25 01:35:13 +00:00
serial.policy seccomp: define naming rules for policy files 2022-06-17 04:35:09 +00:00
serial_device.policy seccomp: define naming rules for policy files 2022-06-17 04:35:09 +00:00
snd_cras_device.policy audio: Support null backend for VirtioSnd 2022-07-14 13:44:57 +00:00
snd_null_device.policy audio: Support null backend for VirtioSnd 2022-07-14 13:44:57 +00:00
tpm_device.policy seccomp: use common_device.policy in tpm_device.policy 2022-02-23 19:23:31 +00:00
vfio_device.policy
vhost_net_device.policy
vhost_vsock_device.policy
video_device.policy seccomp: add rseq to all policy files 2022-07-14 22:45:21 +00:00
vios_audio_device.policy seccomp: allow clock_gettime in all devices 2022-02-22 23:15:48 +00:00
vtpm_proxy_device.policy Add vtpm_proxy into crosvm 2022-06-20 03:41:33 +00:00
vvu_proxy_device.policy crosvm: vvu: proxy: Implement instantiating a VVU proxy device 2022-01-14 04:21:21 +00:00
wl_device.policy devices: wl: initialize gralloc after sandboxing 2022-07-27 01:54:48 +00:00
xhci_device.policy seccomp: define naming rules for policy files 2022-06-17 04:35:09 +00:00