Jorge E. Moreira e40fb21c0d Allow sched_yield in all devices' seccomp policy ... The sched_yield system call is somehow called by the code the rust compiler generates and not directly by the author's implementation. That along with the fact that it won't get called on every run makes it very easy to miss when adding a new device (that happened with virtio-snd). Since that call is quite harmless (it could be argued minijail shouldn't even block it in the first place) it makes sense to allow it for all devices. BUG=b/201306350 Change-Id: I9895da6c8060ae83053474ed9e4472ea2cd8d3e3 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3248126 Auto-Submit: Jorge Moreira Broche <jemoreira@google.com> Tested-by: kokoro <noreply+kokoro@google.com> Commit-Queue: Jorge Moreira Broche <jemoreira@google.com> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>		2021-10-28 19:10:45 +00:00
..
9p_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
balloon_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
battery.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
block_device.policy	seccomp: allow newfstatat in more amd64/arm64 policies	2021-10-01 17:09:16 +00:00
common_device.frequency	seccomp: add frequency file to x86_64	2020-03-19 07:24:56 +00:00
common_device.policy	Allow sched_yield in all devices' seccomp policy	2021-10-28 19:10:45 +00:00
cras_audio_device.policy	ac97: Add timerfd operations to accepted list	2021-07-23 18:43:21 +00:00
cras_snd_device.policy	seccomp: Add timerfd_* to cras_snd_device.policy	2021-10-11 05:10:11 +00:00
fs_device.policy	fs: Support fs-verity	2021-08-23 16:15:03 +00:00
gpu_device.policy	Allow sched_yield in all devices' seccomp policy	2021-10-28 19:10:45 +00:00
input_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
iommu_device.policy	devices: virtio: iommu: enable virtio IOMMU driver	2021-07-09 05:49:26 +00:00
net_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
null_audio_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
pmem_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
rng_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
serial.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
tpm_device.policy	seccomp: allow newfstatat in more amd64/arm64 policies	2021-10-01 17:09:16 +00:00
vfio_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
vhost_net_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
vhost_vsock_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
video_device.policy	Allow sched_yield in all devices' seccomp policy	2021-10-28 19:10:45 +00:00
vios_audio_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
wl_device.policy	Specify prctl's policy only once per device	2021-04-20 22:50:20 +00:00
xhci.policy	seccomp: allow newfstatat in more amd64/arm64 policies	2021-10-01 17:09:16 +00:00