mirror of
https://chromium.googlesource.com/crosvm/crosvm
synced 2025-02-05 18:20:34 +00:00
a7fd914538
To enable SupportsChannelUpgrade in libchrome (upstream r850346,
crrev.com/c/2670092).
BUG=b:189403036
TEST=tast run $hatch-DUT
arc.Notification.vm
arc.CheckAndroidVersion.vm
arc.RemovableMedia.vm
arc.Gamepad.vm
arc.IMEBlockingVK.vm
security.SELinuxFilesDataDir.vm
arc.StartStop.vm
arc.CPUSet.vm
arc.Optin.vm
arc.IntentForward.vm
arc.MIDIClient.vm
arc.IMESwitchShortcut.vm
arc.ChromeCrash.vm_logged_in
arc.Boot.vm
arc.BuildProperties.vm
arc.ConciergeCrash
arc.VMPstoreDump
security.SELinuxProcessesARC.vm
security.NetworkListenersARC.vm
with disable patch removed in libchrome
Change-Id: I1a924c60ebe9707627fdd064b2233a7452d5cc57
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/2984719
Tested-by: kokoro <noreply+kokoro@google.com>
Reviewed-by: Chirantan Ekbote <chirantan@chromium.org>
Reviewed-by: Qijiang Fan <fqj@google.com>
Commit-Queue: Grace Cham <hscham@chromium.org>
43 lines
1 KiB
Text
43 lines
1 KiB
Text
# Copyright 2020 The Chromium OS Authors. All rights reserved.
|
|
# Use of this source code is governed by a BSD-style license that can be
|
|
# found in the LICENSE file.
|
|
|
|
@include /usr/share/policy/crosvm/common_device.policy
|
|
|
|
# Syscalls specific to video devices.
|
|
clock_getres: 1
|
|
connect: 1
|
|
getdents: 1
|
|
getdents64: 1
|
|
getegid: 1
|
|
geteuid: 1
|
|
getgid: 1
|
|
getresgid: 1
|
|
getresuid: 1
|
|
getsockname: 1
|
|
getuid: 1
|
|
# ioctl: arg1 == DRM_IOCTL_*
|
|
ioctl: arg1 & 0x6400
|
|
memfd_create: 1
|
|
openat: 1
|
|
sched_yield: 1
|
|
setpriority: 1
|
|
socket: arg0 == AF_UNIX
|
|
stat: 1
|
|
fstat: 1
|
|
|
|
# Rules needed for minigbm on AMD devices.
|
|
getrandom: 1
|
|
lstat: 1
|
|
# mmap/mprotect differ from the common_device.policy
|
|
mmap: arg2 == PROT_READ|PROT_WRITE || arg2 == PROT_NONE || arg2 == PROT_READ|PROT_EXEC || arg2 == PROT_WRITE || arg2 == PROT_READ
|
|
mprotect: arg2 == PROT_READ|PROT_WRITE || arg2 == PROT_NONE || arg2 == PROT_READ
|
|
readlink: 1
|
|
sched_setaffinity: 1
|
|
sched_setscheduler: arg1 == SCHED_IDLE || arg1 == SCHED_BATCH
|
|
uname: 1
|
|
|
|
# Required by mesa on AMD GPU
|
|
sysinfo: 1
|
|
|
|
prctl: arg0 == PR_SET_NAME
|