1# Copyright 2018 The Chromium OS Authors. All rights reserved. 2# Use of this source code is governed by a BSD-style license that can be 3# found in the LICENSE file. 4 5@include /usr/share/policy/crosvm/common_device.policy 6 7lstat: 1 8timerfd_create: 1 9name_to_handle_at: 1 10access: 1 11faccessat: 1 12faccessat2: 1 13getsockname: 1 14pipe: 1 15setsockopt: 1 16bind: 1 17open: return ENOENT 18openat: 1 19socket: arg0 == AF_NETLINK 20stat: 1 21statx: 1 22# The following ioctls are: 23# 0x4008550d == USBDEVFS_REAPURBNDELAY 24# 0x41045508 == USBDEVFS_GETDRIVER 25# 0x550b == USBDEVFS_DISCARDURB 26# 0x8004550f == USBDEVFS_CLAIMINTERFACE 27# 0x80045510 == USBDEVFS_RELEASEINTERFACE 28# 0x80045515 == USBDEVFS_CLEAR_HALT 29# 0x8004551a == USBDEVFS_GET_CAPABILITIES 30# 0x8038550a == USBDEVFS_SUBMITURB 31# 0xc0185500 == USBDEVFS_CONTROL 32# 0x5514 == USBDEVFS_RESET 33# 0x80045505 == USBDEVFS_SETCONFIGURATION 34# 0x8108551b == USBDEVFS_DISCONNECT_CLAIM 35# 0x40085511 == USBDEVFS_CONNECTINFO 36# 0x80185520 == USBDEVFS_CONNINFO_EX 37ioctl: arg1 == 0xc0185500 || arg1 == 0x41045508 || arg1 == 0x8004550f || arg1 == 0x4008550d || arg1 == 0x8004551a || arg1 == 0x550b || arg1 == 0x80045510 || arg1 == 0x80045515 || arg1 == 0x8038550a || arg1 == 0x5514 || arg1 == 0x80045505 || arg1 == 0x8108551b || arg1 == 0x40085511 || arg1 == 0x80185520 38fstat: 1 39newfstatat: 1 40getrandom: 1 41getdents: 1 42getdents64: 1 43lseek: 1 44prctl: arg0 == PR_SET_NAME 45