unplugged-system/external/crosvm/jail/seccomp/x86_64/vhost_user.policy

13 lines
534 B
Plaintext

# Copyright 2022 The ChromiumOS Authors
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
# Policy file for the vhost-user transport over a socket.
# FIONBIO: for setting non-blocking mode over the socket.
# TCGETS/TCSETS: used on FD 0, probably for serial.
# b/239779171: try moving this to the serial device once we can extend ioctls across policy files.
ioctl: arg1 == FIONBIO || arg1 == TCGETS || arg1 == TCSETS
# For accepting a client connection over the socket.
accept4: 1