1# Copyright 2023 The ChromiumOS Authors 2# Use of this source code is governed by a BSD-style license that can be 3# found in the LICENSE file. 4 5# Syscalls specific to the vhost_vsock device. This policy file is not meant to be used directly, 6# but rather to be included from another one. 7 8# Allow vhost_vsock ioctls only. 9# arg1 == VHOST_GET_FEATURES || 10# arg1 == VHOST_SET_FEATURES || 11# arg1 == VHOST_SET_OWNER || 12# arg1 == VHOST_RESET_OWNER || 13# arg1 == VHOST_SET_MEM_TABLE || 14# arg1 == VHOST_SET_LOG_BASE || 15# arg1 == VHOST_SET_LOG_FD || 16# arg1 == VHOST_SET_VRING_NUM || 17# arg1 == VHOST_SET_VRING_ADDR || 18# arg1 == VHOST_SET_VRING_BASE || 19# arg1 == VHOST_GET_VRING_BASE || 20# arg1 == VHOST_SET_VRING_KICK || 21# arg1 == VHOST_SET_VRING_CALL || 22# arg1 == VHOST_SET_VRING_ERR || 23# arg1 == VHOST_VSOCK_SET_GUEST_CID || 24# arg1 == VHOST_VSOCK_SET_RUNNING 25ioctl: arg1 == 0x8008af00 || arg1 == 0x4008af00 || arg1 == 0x0000af01 || arg1 == 0x0000af02 || arg1 == 0x4008af03 || arg1 == 0x4008af04 || arg1 == 0x4004af07 || arg1 == 0x4008af10 || arg1 == 0x4028af11 || arg1 == 0x4008af12 || arg1 == 0xc008af12 || arg1 == 0x4008af20 || arg1 == 0x4008af21 || arg1 == 0x4008af22 || arg1 == 0x4008af60 || arg1 == 0x4004af61 26connect: 1 27open: return ENOENT 28openat: return ENOENT 29# PDEATHSIG is necessary for jailing as a vhost-user device. 30prctl: arg0 == PR_SET_NAME || arg0 == PR_SET_PDEATHSIG 31