1# Copyright 2019 The Chromium OS Authors. All rights reserved. 2# Use of this source code is governed by a BSD-style license that can be 3# found in the LICENSE file. 4 5@include /usr/share/policy/crosvm/common_device.policy 6 7copy_file_range: 1 8fallocate: 1 9fchdir: 1 10fchmod: 1 11fchmodat: 1 12fchown: 1 13fchownat: 1 14fdatasync: 1 15fgetxattr: 1 16getxattr: 1 17fsetxattr: 1 18setxattr: 1 19flistxattr: 1 20listxattr: 1 21fremovexattr: 1 22removexattr: 1 23fstatfs: 1 24fsync: 1 25ftruncate: 1 26getdents64: 1 27getegid: 1 28geteuid: 1 29getrandom: 1 30ioctl: arg1 == FS_IOC_FSGETXATTR || \ 31 arg1 == FS_IOC_FSSETXATTR || \ 32 arg1 == FS_IOC_GETFLAGS || \ 33 arg1 == FS_IOC_SETFLAGS || \ 34 arg1 == FS_IOC_GET_ENCRYPTION_POLICY_EX 35linkat: 1 36lseek: 1 37mkdir: 1 38mkdirat: 1 39mknodat: 1 40newfstatat: 1 41open: return ENOENT 42openat: 1 43preadv: 1 44pwritev: 1 45readlinkat: 1 46renameat2: 1 47setresgid: 1 48setresuid: 1 49symlinkat: 1 50statx: 1 51umask: 1 52unlinkat: 1 53utimensat: 1 54prctl: arg0 == PR_SET_NAME || arg0 == PR_SET_SECUREBITS || arg0 == PR_GET_SECUREBITS 55capget: 1 56capset: 1 57