crosvm/seccomp/x86_64
Alexandre Courbot 82b1bec6b0 crosvm: add block support to "devices" command
Add support for creating block devices using the `crosvm devices`
command.

Due to conflicting seccomp policies between vhost-user transport and the
block device, we need to temporarily remove some lines from
vhost_user.policy and vvu.policy and reproduce them in the serial
device's policy. This will be handled properly later using a new seccomp
policy parser.

BUG=b:217480043
TEST=`crosvm devices --block vhost=/tmp/vu-block,path=disk.img` results
in a working vhost-user block device.
TEST=`crosvm devices --block vhost=0000:00:10.0,path=disk.img` results
in a working VVU block device.
TEST=regular virtio block device is usable as jailed root device.

Change-Id: Ide62adbf81390eb39cd10f3d2880e2c065982d05
Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/3765000
Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
Commit-Queue: Alexandre Courbot <acourbot@chromium.org>
Tested-by: Alexandre Courbot <acourbot@chromium.org>
Reviewed-by: Keiichi Watanabe <keiichiw@chromium.org>
2022-08-04 04:00:31 +00:00
..
9p_device.policy
balloon_device.policy
battery.policy
block.policy crosvm: add block support to "devices" command 2022-08-04 04:00:31 +00:00
block_device.policy crosvm: add block support to "devices" command 2022-08-04 04:00:31 +00:00
block_device_vhost_user.policy crosvm: add block support to "devices" command 2022-08-04 04:00:31 +00:00
block_device_vvu.policy crosvm: add block support to "devices" command 2022-08-04 04:00:31 +00:00
coiommu_device.policy
common_device.frequency
common_device.policy
cras_audio_device.policy
fs_device.policy
gpu_common.policy
gpu_device.policy
gpu_render_server.policy
input_device.policy
iommu_device.policy
net_device.policy
null_audio_device.policy
pmem_device.policy
rng_device.policy
serial.policy crosvm: add serial support to "devices" command 2022-08-02 09:21:30 +00:00
serial_device.policy
serial_device_vhost_user.policy crosvm: add block support to "devices" command 2022-08-04 04:00:31 +00:00
serial_device_vvu.policy crosvm: add block support to "devices" command 2022-08-04 04:00:31 +00:00
snd_cras_device.policy
snd_null_device.policy
tpm_device.policy
vfio_device.policy
vhost_net_device.policy
vhost_user.policy crosvm: add block support to "devices" command 2022-08-04 04:00:31 +00:00
vhost_vsock_device.policy
video_device.policy
vios_audio_device.policy
vtpm_proxy_device.policy
vvu.policy crosvm: add block support to "devices" command 2022-08-04 04:00:31 +00:00
vvu_proxy_device.policy
wl_device.policy
xhci_device.policy