crosvm/seccomp/aarch64
Jordan R Abrahams e3c53096d7 seccomp: Update seccomp filters for glibc
At present, libraries which use glibc to dynamically load
shared libraries do not have fstafs in their seccomp policies.
A change in glibc will force all systems which load shared
libraries to call the fstatfs or fstatfs64 syscall.

Without the call, crosvm will not start when running
crostini/android tests.

BUG=chromium:1182687
TEST=CQ of https://crrev.com/c/2910526

Change-Id: I10abb8866474c2fe0398a17a80069cf2b0629493
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3011355
Tested-by: kokoro <noreply+kokoro@google.com>
Reviewed-by: Dennis Kempin <denniskempin@google.com>
Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
Commit-Queue: Jordan R Abrahams <ajordanr@google.com>
2021-07-22 17:08:20 +00:00
..
9p_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
balloon_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
battery.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
block_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
common_device.policy cros_async: Don't use io_uring on kernels < 5.10 2021-07-14 09:42:39 +00:00
cras_audio_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
fs_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
gpu_device.policy seccomp: Update seccomp filters for glibc 2021-07-22 17:08:20 +00:00
input_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
net_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
null_audio_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
pmem_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
rng_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
serial.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
tpm_device.policy tree-wide: seccomp: allow clock_nanosleep syscalls 2021-03-07 01:53:10 +00:00
vhost_net_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
vhost_vsock_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
vios_audio_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
wl_device.policy Specify prctl's policy only once per device 2021-04-20 22:50:20 +00:00
xhci.policy cros_async: Don't use io_uring on kernels < 5.10 2021-07-14 09:42:39 +00:00