crosvm/seccomp/arm
Yusuke Sato 1617c21918 seccomp: Allow 9p device to use open/openat
This allows us to use export a directory to a VM with the
'--shared-dir tag:/dir' crosvm command line flag without relying
on seneschal. The fs device's policy already does the same.

BUG=b:123309049
TEST=Start tot ARCVM, run 'mkdir /var/run/arc/arcvm && mount -t 9p
  -o "trans=virtio,version=9p2000.L,cache=none,access=any"
  host_generated /var/run/arc/arcvm && ls /var/run/arc/arcvm',
  verify ls prints files.

Change-Id: I8f8b265fc8a7de159508afbee5114b6a3f084d01
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/1995319
Tested-by: Yusuke Sato <yusukes@chromium.org>
Tested-by: kokoro <noreply+kokoro@google.com>
Reviewed-by: Lepton Wu <lepton@chromium.org>
Reviewed-by: Chirantan Ekbote <chirantan@chromium.org>
Commit-Queue: Yusuke Sato <yusukes@chromium.org>
2020-01-13 21:26:19 +00:00
..
9p_device.policy seccomp: Allow 9p device to use open/openat 2020-01-13 21:26:19 +00:00
balloon_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00
block_device.policy sys_util: add WriteZeroesAt trait 2019-11-27 21:22:37 +00:00
common_device.policy seccomp: move gettid to common_device.policy 2019-12-06 03:21:11 +00:00
cras_audio_device.policy ac97: Fix device real time priority issue 2019-08-01 09:25:59 +00:00
fs_device.policy devices: fs: Support fs crypto ioctls 2019-12-10 03:10:57 +00:00
gpu_device.policy seccomp: add memfd_create to arm gpu_device.policy 2019-12-06 09:35:33 +00:00
input_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00
net_device.policy devices: net: add control queue for enabling/disabling offloads 2020-01-08 23:10:13 +00:00
null_audio_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00
pmem_device.policy devices: Add separate seccomp policy for pmem device 2019-06-21 21:47:58 +00:00
rng_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00
serial.policy devices: jail serial device 2019-10-10 02:09:13 +00:00
tpm_device.policy seccomp: return error from socket for TPM device 2019-07-09 23:34:57 +00:00
vhost_net_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00
vhost_vsock_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00
wl_device.policy seccomp: refactor policy into common_device.policy 2019-02-07 03:02:12 -08:00
xhci.policy seccomp: move gettid to common_device.policy 2019-12-06 03:21:11 +00:00