xref: /aosp_15_r20/external/crosvm/jail/seccomp/Android.bp (revision bb4ee6a4ae7042d18b07a98463b9c8b875e44b39)
1// Autogenerated via gen_android.sh
2//
3// Copyright (C) 2020 The Android Open Source Project
4//
5// Licensed under the Apache License, Version 2.0 (the "License");
6// you may not use this file except in compliance with the License.
7// You may obtain a copy of the License at
8//
9//      http://www.apache.org/licenses/LICENSE-2.0
10//
11// Unless required by applicable law or agreed to in writing, software
12// distributed under the License is distributed on an "AS IS" BASIS,
13// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14// See the License for the specific language governing permissions and
15// limitations under the License.
16
17// DO NOT MODIFY DIRECTLY, ALL CHANGES WILL BE OVERWRITTEN BY gen_android.sh
18
19package {
20    // See: http://go/android-license-faq
21    // A large-scale-change added 'default_applicable_licenses' to import
22    // all of the 'license_kinds' from "external_crosvm_license"
23    // to get the below license kinds:
24    //   SPDX-license-identifier-Apache-2.0
25    //   SPDX-license-identifier-BSD
26    default_applicable_licenses: ["external_crosvm_license"],
27}
28
29python_binary_host {
30    name: "detect_duplication",
31    main: "detect_duplication.py",
32    srcs: [
33        "detect_duplication.py",
34    ],
35}
36
37genrule_defaults {
38    name: "crosvm_inline_seccomp_policy_x86_64",
39    cmd: "set -o pipefail; $(location policy-inliner.sh) $(location x86_64/common_device.policy) $(location x86_64/gpu_common.policy) $(location x86_64/serial.policy) $(location x86_64/net.policy) $(location x86_64/block.policy) $(location x86_64/vhost_user.policy) $(location x86_64/vhost_vsock.policy) < $(in) | $(location detect_duplication) > $(out)",
40    tools: [
41        "detect_duplication",
42    ],
43    tool_files: [
44        "policy-inliner.sh",
45        "x86_64/common_device.policy",
46        "x86_64/gpu_common.policy",
47        "x86_64/serial.policy",
48        "x86_64/net.policy",
49        "x86_64/block.policy",
50        "x86_64/vhost_user.policy",
51        "x86_64/vhost_vsock.policy",
52    ],
53}
54
55genrule_defaults {
56    name: "crosvm_inline_seccomp_policy_aarch64",
57    cmd: "set -o pipefail; $(location policy-inliner.sh) $(location aarch64/common_device.policy) $(location aarch64/gpu_common.policy) $(location aarch64/serial.policy) $(location aarch64/net.policy) DOESNT_EXIST DOESNT_EXIST DOESNT_EXIST DOESNT_EXIST < $(in) | $(location detect_duplication) > $(out)",
58    tools: [
59        "detect_duplication",
60    ],
61    tool_files: [
62        "policy-inliner.sh",
63        "aarch64/common_device.policy",
64        "aarch64/gpu_common.policy",
65        "aarch64/serial.policy",
66        "aarch64/net.policy",
67    ],
68}
69
70genrule {
71    name: "vhost_net_device.policy_inline_x86_64",
72    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
73    out: ["vhost_net_device.policy"],
74    srcs: ["x86_64/vhost_net_device.policy"],
75}
76
77prebuilt_usr_share_host {
78    name: "vhost_net_device.policy_x86_64",
79    filename: "vhost_net_device.policy",
80    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
81    src: ":vhost_net_device.policy_inline_x86_64",
82}
83
84genrule {
85    name: "vhost_net_device.policy_inline_aarch64",
86    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
87    out: ["vhost_net_device.policy"],
88    srcs: ["aarch64/vhost_net_device.policy"],
89}
90
91prebuilt_usr_share_host {
92    name: "vhost_net_device.policy_aarch64",
93    filename: "vhost_net_device.policy",
94    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
95    src: ":vhost_net_device.policy_inline_aarch64",
96}
97
98prebuilt_etc {
99    name: "vhost_net_device.policy",
100    relative_install_path: "seccomp_policy/crosvm",
101    arch: {
102        x86_64: {
103            src: ":vhost_net_device.policy_inline_x86_64",
104        },
105        arm64: {
106            src: ":vhost_net_device.policy_inline_aarch64",
107        },
108    },
109    target: {
110        android_arm: {
111            enabled: false,
112        },
113        android_x86: {
114            enabled: false,
115        },
116        android_riscv64: {
117            enabled: false,
118        },
119    },
120}
121
122genrule {
123    name: "input_device.policy_inline_x86_64",
124    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
125    out: ["input_device.policy"],
126    srcs: ["x86_64/input_device.policy"],
127}
128
129prebuilt_usr_share_host {
130    name: "input_device.policy_x86_64",
131    filename: "input_device.policy",
132    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
133    src: ":input_device.policy_inline_x86_64",
134}
135
136genrule {
137    name: "input_device.policy_inline_aarch64",
138    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
139    out: ["input_device.policy"],
140    srcs: ["aarch64/input_device.policy"],
141}
142
143prebuilt_usr_share_host {
144    name: "input_device.policy_aarch64",
145    filename: "input_device.policy",
146    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
147    src: ":input_device.policy_inline_aarch64",
148}
149
150prebuilt_etc {
151    name: "input_device.policy",
152    relative_install_path: "seccomp_policy/crosvm",
153    arch: {
154        x86_64: {
155            src: ":input_device.policy_inline_x86_64",
156        },
157        arm64: {
158            src: ":input_device.policy_inline_aarch64",
159        },
160    },
161    target: {
162        android_arm: {
163            enabled: false,
164        },
165        android_x86: {
166            enabled: false,
167        },
168        android_riscv64: {
169            enabled: false,
170        },
171    },
172}
173
174genrule {
175    name: "wl_device.policy_inline_x86_64",
176    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
177    out: ["wl_device.policy"],
178    srcs: ["x86_64/wl_device.policy"],
179}
180
181prebuilt_usr_share_host {
182    name: "wl_device.policy_x86_64",
183    filename: "wl_device.policy",
184    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
185    src: ":wl_device.policy_inline_x86_64",
186}
187
188genrule {
189    name: "wl_device.policy_inline_aarch64",
190    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
191    out: ["wl_device.policy"],
192    srcs: ["aarch64/wl_device.policy"],
193}
194
195prebuilt_usr_share_host {
196    name: "wl_device.policy_aarch64",
197    filename: "wl_device.policy",
198    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
199    src: ":wl_device.policy_inline_aarch64",
200}
201
202prebuilt_etc {
203    name: "wl_device.policy",
204    relative_install_path: "seccomp_policy/crosvm",
205    arch: {
206        x86_64: {
207            src: ":wl_device.policy_inline_x86_64",
208        },
209        arm64: {
210            src: ":wl_device.policy_inline_aarch64",
211        },
212    },
213    target: {
214        android_arm: {
215            enabled: false,
216        },
217        android_x86: {
218            enabled: false,
219        },
220        android_riscv64: {
221            enabled: false,
222        },
223    },
224}
225
226genrule {
227    name: "net_device.policy_inline_x86_64",
228    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
229    out: ["net_device.policy"],
230    srcs: ["x86_64/net_device.policy"],
231}
232
233prebuilt_usr_share_host {
234    name: "net_device.policy_x86_64",
235    filename: "net_device.policy",
236    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
237    src: ":net_device.policy_inline_x86_64",
238}
239
240genrule {
241    name: "net_device.policy_inline_aarch64",
242    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
243    out: ["net_device.policy"],
244    srcs: ["aarch64/net_device.policy"],
245}
246
247prebuilt_usr_share_host {
248    name: "net_device.policy_aarch64",
249    filename: "net_device.policy",
250    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
251    src: ":net_device.policy_inline_aarch64",
252}
253
254prebuilt_etc {
255    name: "net_device.policy",
256    relative_install_path: "seccomp_policy/crosvm",
257    arch: {
258        x86_64: {
259            src: ":net_device.policy_inline_x86_64",
260        },
261        arm64: {
262            src: ":net_device.policy_inline_aarch64",
263        },
264    },
265    target: {
266        android_arm: {
267            enabled: false,
268        },
269        android_x86: {
270            enabled: false,
271        },
272        android_riscv64: {
273            enabled: false,
274        },
275    },
276}
277
278genrule {
279    name: "9p_device.policy_inline_x86_64",
280    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
281    out: ["9p_device.policy"],
282    srcs: ["x86_64/9p_device.policy"],
283}
284
285prebuilt_usr_share_host {
286    name: "9p_device.policy_x86_64",
287    filename: "9p_device.policy",
288    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
289    src: ":9p_device.policy_inline_x86_64",
290}
291
292genrule {
293    name: "9p_device.policy_inline_aarch64",
294    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
295    out: ["9p_device.policy"],
296    srcs: ["aarch64/9p_device.policy"],
297}
298
299prebuilt_usr_share_host {
300    name: "9p_device.policy_aarch64",
301    filename: "9p_device.policy",
302    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
303    src: ":9p_device.policy_inline_aarch64",
304}
305
306prebuilt_etc {
307    name: "9p_device.policy",
308    relative_install_path: "seccomp_policy/crosvm",
309    arch: {
310        x86_64: {
311            src: ":9p_device.policy_inline_x86_64",
312        },
313        arm64: {
314            src: ":9p_device.policy_inline_aarch64",
315        },
316    },
317    target: {
318        android_arm: {
319            enabled: false,
320        },
321        android_x86: {
322            enabled: false,
323        },
324        android_riscv64: {
325            enabled: false,
326        },
327    },
328}
329
330genrule {
331    name: "vhost_scmi_device.policy_inline_aarch64",
332    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
333    out: ["vhost_scmi_device.policy"],
334    srcs: ["aarch64/vhost_scmi_device.policy"],
335}
336
337prebuilt_usr_share_host {
338    name: "vhost_scmi_device.policy_aarch64",
339    filename: "vhost_scmi_device.policy",
340    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
341    src: ":vhost_scmi_device.policy_inline_aarch64",
342}
343
344prebuilt_etc {
345    name: "vhost_scmi_device.policy",
346    relative_install_path: "seccomp_policy/crosvm",
347    arch: {
348        arm64: {
349            src: ":vhost_scmi_device.policy_inline_aarch64",
350        },
351    },
352    target: {
353        android_x86_64: {
354            enabled: false,
355        },
356        android_arm: {
357            enabled: false,
358        },
359        android_x86: {
360            enabled: false,
361        },
362        android_riscv64: {
363            enabled: false,
364        },
365    },
366}
367
368genrule {
369    name: "cras_audio_device.policy_inline_x86_64",
370    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
371    out: ["cras_audio_device.policy"],
372    srcs: ["x86_64/cras_audio_device.policy"],
373}
374
375prebuilt_usr_share_host {
376    name: "cras_audio_device.policy_x86_64",
377    filename: "cras_audio_device.policy",
378    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
379    src: ":cras_audio_device.policy_inline_x86_64",
380}
381
382genrule {
383    name: "cras_audio_device.policy_inline_aarch64",
384    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
385    out: ["cras_audio_device.policy"],
386    srcs: ["aarch64/cras_audio_device.policy"],
387}
388
389prebuilt_usr_share_host {
390    name: "cras_audio_device.policy_aarch64",
391    filename: "cras_audio_device.policy",
392    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
393    src: ":cras_audio_device.policy_inline_aarch64",
394}
395
396prebuilt_etc {
397    name: "cras_audio_device.policy",
398    relative_install_path: "seccomp_policy/crosvm",
399    arch: {
400        x86_64: {
401            src: ":cras_audio_device.policy_inline_x86_64",
402        },
403        arm64: {
404            src: ":cras_audio_device.policy_inline_aarch64",
405        },
406    },
407    target: {
408        android_arm: {
409            enabled: false,
410        },
411        android_x86: {
412            enabled: false,
413        },
414        android_riscv64: {
415            enabled: false,
416        },
417    },
418}
419
420genrule {
421    name: "vfio_device.policy_inline_x86_64",
422    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
423    out: ["vfio_device.policy"],
424    srcs: ["x86_64/vfio_device.policy"],
425}
426
427prebuilt_usr_share_host {
428    name: "vfio_device.policy_x86_64",
429    filename: "vfio_device.policy",
430    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
431    src: ":vfio_device.policy_inline_x86_64",
432}
433
434prebuilt_etc {
435    name: "vfio_device.policy",
436    relative_install_path: "seccomp_policy/crosvm",
437    arch: {
438        x86_64: {
439            src: ":vfio_device.policy_inline_x86_64",
440        },
441    },
442    target: {
443        android_arm64: {
444            enabled: false,
445        },
446        android_arm: {
447            enabled: false,
448        },
449        android_x86: {
450            enabled: false,
451        },
452        android_riscv64: {
453            enabled: false,
454        },
455    },
456}
457
458genrule {
459    name: "vhost_vsock_device.policy_inline_x86_64",
460    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
461    out: ["vhost_vsock_device.policy"],
462    srcs: ["x86_64/vhost_vsock_device.policy"],
463}
464
465prebuilt_usr_share_host {
466    name: "vhost_vsock_device.policy_x86_64",
467    filename: "vhost_vsock_device.policy",
468    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
469    src: ":vhost_vsock_device.policy_inline_x86_64",
470}
471
472genrule {
473    name: "vhost_vsock_device.policy_inline_aarch64",
474    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
475    out: ["vhost_vsock_device.policy"],
476    srcs: ["aarch64/vhost_vsock_device.policy"],
477}
478
479prebuilt_usr_share_host {
480    name: "vhost_vsock_device.policy_aarch64",
481    filename: "vhost_vsock_device.policy",
482    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
483    src: ":vhost_vsock_device.policy_inline_aarch64",
484}
485
486prebuilt_etc {
487    name: "vhost_vsock_device.policy",
488    relative_install_path: "seccomp_policy/crosvm",
489    arch: {
490        x86_64: {
491            src: ":vhost_vsock_device.policy_inline_x86_64",
492        },
493        arm64: {
494            src: ":vhost_vsock_device.policy_inline_aarch64",
495        },
496    },
497    target: {
498        android_arm: {
499            enabled: false,
500        },
501        android_x86: {
502            enabled: false,
503        },
504        android_riscv64: {
505            enabled: false,
506        },
507    },
508}
509
510genrule {
511    name: "gpu_render_server.policy_inline_x86_64",
512    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
513    out: ["gpu_render_server.policy"],
514    srcs: ["x86_64/gpu_render_server.policy"],
515}
516
517prebuilt_usr_share_host {
518    name: "gpu_render_server.policy_x86_64",
519    filename: "gpu_render_server.policy",
520    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
521    src: ":gpu_render_server.policy_inline_x86_64",
522}
523
524genrule {
525    name: "gpu_render_server.policy_inline_aarch64",
526    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
527    out: ["gpu_render_server.policy"],
528    srcs: ["aarch64/gpu_render_server.policy"],
529}
530
531prebuilt_usr_share_host {
532    name: "gpu_render_server.policy_aarch64",
533    filename: "gpu_render_server.policy",
534    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
535    src: ":gpu_render_server.policy_inline_aarch64",
536}
537
538prebuilt_etc {
539    name: "gpu_render_server.policy",
540    relative_install_path: "seccomp_policy/crosvm",
541    arch: {
542        x86_64: {
543            src: ":gpu_render_server.policy_inline_x86_64",
544        },
545        arm64: {
546            src: ":gpu_render_server.policy_inline_aarch64",
547        },
548    },
549    target: {
550        android_arm: {
551            enabled: false,
552        },
553        android_x86: {
554            enabled: false,
555        },
556        android_riscv64: {
557            enabled: false,
558        },
559    },
560}
561
562genrule {
563    name: "block_device.policy_inline_x86_64",
564    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
565    out: ["block_device.policy"],
566    srcs: ["x86_64/block_device.policy"],
567}
568
569prebuilt_usr_share_host {
570    name: "block_device.policy_x86_64",
571    filename: "block_device.policy",
572    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
573    src: ":block_device.policy_inline_x86_64",
574}
575
576genrule {
577    name: "block_device.policy_inline_aarch64",
578    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
579    out: ["block_device.policy"],
580    srcs: ["aarch64/block_device.policy"],
581}
582
583prebuilt_usr_share_host {
584    name: "block_device.policy_aarch64",
585    filename: "block_device.policy",
586    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
587    src: ":block_device.policy_inline_aarch64",
588}
589
590prebuilt_etc {
591    name: "block_device.policy",
592    relative_install_path: "seccomp_policy/crosvm",
593    arch: {
594        x86_64: {
595            src: ":block_device.policy_inline_x86_64",
596        },
597        arm64: {
598            src: ":block_device.policy_inline_aarch64",
599        },
600    },
601    target: {
602        android_arm: {
603            enabled: false,
604        },
605        android_x86: {
606            enabled: false,
607        },
608        android_riscv64: {
609            enabled: false,
610        },
611    },
612}
613
614genrule {
615    name: "vtpm_proxy_device.policy_inline_x86_64",
616    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
617    out: ["vtpm_proxy_device.policy"],
618    srcs: ["x86_64/vtpm_proxy_device.policy"],
619}
620
621prebuilt_usr_share_host {
622    name: "vtpm_proxy_device.policy_x86_64",
623    filename: "vtpm_proxy_device.policy",
624    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
625    src: ":vtpm_proxy_device.policy_inline_x86_64",
626}
627
628prebuilt_etc {
629    name: "vtpm_proxy_device.policy",
630    relative_install_path: "seccomp_policy/crosvm",
631    arch: {
632        x86_64: {
633            src: ":vtpm_proxy_device.policy_inline_x86_64",
634        },
635    },
636    target: {
637        android_arm64: {
638            enabled: false,
639        },
640        android_arm: {
641            enabled: false,
642        },
643        android_x86: {
644            enabled: false,
645        },
646        android_riscv64: {
647            enabled: false,
648        },
649    },
650}
651
652genrule {
653    name: "vios_audio_device.policy_inline_x86_64",
654    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
655    out: ["vios_audio_device.policy"],
656    srcs: ["x86_64/vios_audio_device.policy"],
657}
658
659prebuilt_usr_share_host {
660    name: "vios_audio_device.policy_x86_64",
661    filename: "vios_audio_device.policy",
662    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
663    src: ":vios_audio_device.policy_inline_x86_64",
664}
665
666genrule {
667    name: "vios_audio_device.policy_inline_aarch64",
668    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
669    out: ["vios_audio_device.policy"],
670    srcs: ["aarch64/vios_audio_device.policy"],
671}
672
673prebuilt_usr_share_host {
674    name: "vios_audio_device.policy_aarch64",
675    filename: "vios_audio_device.policy",
676    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
677    src: ":vios_audio_device.policy_inline_aarch64",
678}
679
680prebuilt_etc {
681    name: "vios_audio_device.policy",
682    relative_install_path: "seccomp_policy/crosvm",
683    arch: {
684        x86_64: {
685            src: ":vios_audio_device.policy_inline_x86_64",
686        },
687        arm64: {
688            src: ":vios_audio_device.policy_inline_aarch64",
689        },
690    },
691    target: {
692        android_arm: {
693            enabled: false,
694        },
695        android_x86: {
696            enabled: false,
697        },
698        android_riscv64: {
699            enabled: false,
700        },
701    },
702}
703
704genrule {
705    name: "fs_device.policy_inline_x86_64",
706    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
707    out: ["fs_device.policy"],
708    srcs: ["x86_64/fs_device.policy"],
709}
710
711prebuilt_usr_share_host {
712    name: "fs_device.policy_x86_64",
713    filename: "fs_device.policy",
714    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
715    src: ":fs_device.policy_inline_x86_64",
716}
717
718genrule {
719    name: "fs_device.policy_inline_aarch64",
720    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
721    out: ["fs_device.policy"],
722    srcs: ["aarch64/fs_device.policy"],
723}
724
725prebuilt_usr_share_host {
726    name: "fs_device.policy_aarch64",
727    filename: "fs_device.policy",
728    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
729    src: ":fs_device.policy_inline_aarch64",
730}
731
732prebuilt_etc {
733    name: "fs_device.policy",
734    relative_install_path: "seccomp_policy/crosvm",
735    arch: {
736        x86_64: {
737            src: ":fs_device.policy_inline_x86_64",
738        },
739        arm64: {
740            src: ":fs_device.policy_inline_aarch64",
741        },
742    },
743    target: {
744        android_arm: {
745            enabled: false,
746        },
747        android_x86: {
748            enabled: false,
749        },
750        android_riscv64: {
751            enabled: false,
752        },
753    },
754}
755
756genrule {
757    name: "jail_warden.policy_inline_x86_64",
758    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
759    out: ["jail_warden.policy"],
760    srcs: ["x86_64/jail_warden.policy"],
761}
762
763prebuilt_usr_share_host {
764    name: "jail_warden.policy_x86_64",
765    filename: "jail_warden.policy",
766    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
767    src: ":jail_warden.policy_inline_x86_64",
768}
769
770prebuilt_etc {
771    name: "jail_warden.policy",
772    relative_install_path: "seccomp_policy/crosvm",
773    arch: {
774        x86_64: {
775            src: ":jail_warden.policy_inline_x86_64",
776        },
777    },
778    target: {
779        android_arm64: {
780            enabled: false,
781        },
782        android_arm: {
783            enabled: false,
784        },
785        android_x86: {
786            enabled: false,
787        },
788        android_riscv64: {
789            enabled: false,
790        },
791    },
792}
793
794genrule {
795    name: "iommu_device.policy_inline_x86_64",
796    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
797    out: ["iommu_device.policy"],
798    srcs: ["x86_64/iommu_device.policy"],
799}
800
801prebuilt_usr_share_host {
802    name: "iommu_device.policy_x86_64",
803    filename: "iommu_device.policy",
804    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
805    src: ":iommu_device.policy_inline_x86_64",
806}
807
808prebuilt_etc {
809    name: "iommu_device.policy",
810    relative_install_path: "seccomp_policy/crosvm",
811    arch: {
812        x86_64: {
813            src: ":iommu_device.policy_inline_x86_64",
814        },
815    },
816    target: {
817        android_arm64: {
818            enabled: false,
819        },
820        android_arm: {
821            enabled: false,
822        },
823        android_x86: {
824            enabled: false,
825        },
826        android_riscv64: {
827            enabled: false,
828        },
829    },
830}
831
832genrule {
833    name: "snd_null_device.policy_inline_x86_64",
834    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
835    out: ["snd_null_device.policy"],
836    srcs: ["x86_64/snd_null_device.policy"],
837}
838
839prebuilt_usr_share_host {
840    name: "snd_null_device.policy_x86_64",
841    filename: "snd_null_device.policy",
842    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
843    src: ":snd_null_device.policy_inline_x86_64",
844}
845
846genrule {
847    name: "snd_null_device.policy_inline_aarch64",
848    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
849    out: ["snd_null_device.policy"],
850    srcs: ["aarch64/snd_null_device.policy"],
851}
852
853prebuilt_usr_share_host {
854    name: "snd_null_device.policy_aarch64",
855    filename: "snd_null_device.policy",
856    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
857    src: ":snd_null_device.policy_inline_aarch64",
858}
859
860prebuilt_etc {
861    name: "snd_null_device.policy",
862    relative_install_path: "seccomp_policy/crosvm",
863    arch: {
864        x86_64: {
865            src: ":snd_null_device.policy_inline_x86_64",
866        },
867        arm64: {
868            src: ":snd_null_device.policy_inline_aarch64",
869        },
870    },
871    target: {
872        android_arm: {
873            enabled: false,
874        },
875        android_x86: {
876            enabled: false,
877        },
878        android_riscv64: {
879            enabled: false,
880        },
881    },
882}
883
884genrule {
885    name: "xhci_device.policy_inline_x86_64",
886    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
887    out: ["xhci_device.policy"],
888    srcs: ["x86_64/xhci_device.policy"],
889}
890
891prebuilt_usr_share_host {
892    name: "xhci_device.policy_x86_64",
893    filename: "xhci_device.policy",
894    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
895    src: ":xhci_device.policy_inline_x86_64",
896}
897
898genrule {
899    name: "xhci_device.policy_inline_aarch64",
900    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
901    out: ["xhci_device.policy"],
902    srcs: ["aarch64/xhci_device.policy"],
903}
904
905prebuilt_usr_share_host {
906    name: "xhci_device.policy_aarch64",
907    filename: "xhci_device.policy",
908    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
909    src: ":xhci_device.policy_inline_aarch64",
910}
911
912prebuilt_etc {
913    name: "xhci_device.policy",
914    relative_install_path: "seccomp_policy/crosvm",
915    arch: {
916        x86_64: {
917            src: ":xhci_device.policy_inline_x86_64",
918        },
919        arm64: {
920            src: ":xhci_device.policy_inline_aarch64",
921        },
922    },
923    target: {
924        android_arm: {
925            enabled: false,
926        },
927        android_x86: {
928            enabled: false,
929        },
930        android_riscv64: {
931            enabled: false,
932        },
933    },
934}
935
936genrule {
937    name: "rng_device.policy_inline_x86_64",
938    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
939    out: ["rng_device.policy"],
940    srcs: ["x86_64/rng_device.policy"],
941}
942
943prebuilt_usr_share_host {
944    name: "rng_device.policy_x86_64",
945    filename: "rng_device.policy",
946    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
947    src: ":rng_device.policy_inline_x86_64",
948}
949
950genrule {
951    name: "rng_device.policy_inline_aarch64",
952    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
953    out: ["rng_device.policy"],
954    srcs: ["aarch64/rng_device.policy"],
955}
956
957prebuilt_usr_share_host {
958    name: "rng_device.policy_aarch64",
959    filename: "rng_device.policy",
960    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
961    src: ":rng_device.policy_inline_aarch64",
962}
963
964prebuilt_etc {
965    name: "rng_device.policy",
966    relative_install_path: "seccomp_policy/crosvm",
967    arch: {
968        x86_64: {
969            src: ":rng_device.policy_inline_x86_64",
970        },
971        arm64: {
972            src: ":rng_device.policy_inline_aarch64",
973        },
974    },
975    target: {
976        android_arm: {
977            enabled: false,
978        },
979        android_x86: {
980            enabled: false,
981        },
982        android_riscv64: {
983            enabled: false,
984        },
985    },
986}
987
988genrule {
989    name: "null_audio_device.policy_inline_x86_64",
990    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
991    out: ["null_audio_device.policy"],
992    srcs: ["x86_64/null_audio_device.policy"],
993}
994
995prebuilt_usr_share_host {
996    name: "null_audio_device.policy_x86_64",
997    filename: "null_audio_device.policy",
998    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
999    src: ":null_audio_device.policy_inline_x86_64",
1000}
1001
1002genrule {
1003    name: "null_audio_device.policy_inline_aarch64",
1004    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
1005    out: ["null_audio_device.policy"],
1006    srcs: ["aarch64/null_audio_device.policy"],
1007}
1008
1009prebuilt_usr_share_host {
1010    name: "null_audio_device.policy_aarch64",
1011    filename: "null_audio_device.policy",
1012    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
1013    src: ":null_audio_device.policy_inline_aarch64",
1014}
1015
1016prebuilt_etc {
1017    name: "null_audio_device.policy",
1018    relative_install_path: "seccomp_policy/crosvm",
1019    arch: {
1020        x86_64: {
1021            src: ":null_audio_device.policy_inline_x86_64",
1022        },
1023        arm64: {
1024            src: ":null_audio_device.policy_inline_aarch64",
1025        },
1026    },
1027    target: {
1028        android_arm: {
1029            enabled: false,
1030        },
1031        android_x86: {
1032            enabled: false,
1033        },
1034        android_riscv64: {
1035            enabled: false,
1036        },
1037    },
1038}
1039
1040genrule {
1041    name: "battery.policy_inline_x86_64",
1042    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
1043    out: ["battery.policy"],
1044    srcs: ["x86_64/battery.policy"],
1045}
1046
1047prebuilt_usr_share_host {
1048    name: "battery.policy_x86_64",
1049    filename: "battery.policy",
1050    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
1051    src: ":battery.policy_inline_x86_64",
1052}
1053
1054genrule {
1055    name: "battery.policy_inline_aarch64",
1056    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
1057    out: ["battery.policy"],
1058    srcs: ["aarch64/battery.policy"],
1059}
1060
1061prebuilt_usr_share_host {
1062    name: "battery.policy_aarch64",
1063    filename: "battery.policy",
1064    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
1065    src: ":battery.policy_inline_aarch64",
1066}
1067
1068prebuilt_etc {
1069    name: "battery.policy",
1070    relative_install_path: "seccomp_policy/crosvm",
1071    arch: {
1072        x86_64: {
1073            src: ":battery.policy_inline_x86_64",
1074        },
1075        arm64: {
1076            src: ":battery.policy_inline_aarch64",
1077        },
1078    },
1079    target: {
1080        android_arm: {
1081            enabled: false,
1082        },
1083        android_x86: {
1084            enabled: false,
1085        },
1086        android_riscv64: {
1087            enabled: false,
1088        },
1089    },
1090}
1091
1092genrule {
1093    name: "video_device.policy_inline_x86_64",
1094    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
1095    out: ["video_device.policy"],
1096    srcs: ["x86_64/video_device.policy"],
1097}
1098
1099prebuilt_usr_share_host {
1100    name: "video_device.policy_x86_64",
1101    filename: "video_device.policy",
1102    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
1103    src: ":video_device.policy_inline_x86_64",
1104}
1105
1106genrule {
1107    name: "video_device.policy_inline_aarch64",
1108    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
1109    out: ["video_device.policy"],
1110    srcs: ["aarch64/video_device.policy"],
1111}
1112
1113prebuilt_usr_share_host {
1114    name: "video_device.policy_aarch64",
1115    filename: "video_device.policy",
1116    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
1117    src: ":video_device.policy_inline_aarch64",
1118}
1119
1120prebuilt_etc {
1121    name: "video_device.policy",
1122    relative_install_path: "seccomp_policy/crosvm",
1123    arch: {
1124        x86_64: {
1125            src: ":video_device.policy_inline_x86_64",
1126        },
1127        arm64: {
1128            src: ":video_device.policy_inline_aarch64",
1129        },
1130    },
1131    target: {
1132        android_arm: {
1133            enabled: false,
1134        },
1135        android_x86: {
1136            enabled: false,
1137        },
1138        android_riscv64: {
1139            enabled: false,
1140        },
1141    },
1142}
1143
1144genrule {
1145    name: "coiommu_device.policy_inline_x86_64",
1146    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
1147    out: ["coiommu_device.policy"],
1148    srcs: ["x86_64/coiommu_device.policy"],
1149}
1150
1151prebuilt_usr_share_host {
1152    name: "coiommu_device.policy_x86_64",
1153    filename: "coiommu_device.policy",
1154    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
1155    src: ":coiommu_device.policy_inline_x86_64",
1156}
1157
1158genrule {
1159    name: "coiommu_device.policy_inline_aarch64",
1160    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
1161    out: ["coiommu_device.policy"],
1162    srcs: ["aarch64/coiommu_device.policy"],
1163}
1164
1165prebuilt_usr_share_host {
1166    name: "coiommu_device.policy_aarch64",
1167    filename: "coiommu_device.policy",
1168    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
1169    src: ":coiommu_device.policy_inline_aarch64",
1170}
1171
1172prebuilt_etc {
1173    name: "coiommu_device.policy",
1174    relative_install_path: "seccomp_policy/crosvm",
1175    arch: {
1176        x86_64: {
1177            src: ":coiommu_device.policy_inline_x86_64",
1178        },
1179        arm64: {
1180            src: ":coiommu_device.policy_inline_aarch64",
1181        },
1182    },
1183    target: {
1184        android_arm: {
1185            enabled: false,
1186        },
1187        android_x86: {
1188            enabled: false,
1189        },
1190        android_riscv64: {
1191            enabled: false,
1192        },
1193    },
1194}
1195
1196genrule {
1197    name: "serial_device_vhost_user.policy_inline_x86_64",
1198    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
1199    out: ["serial_device_vhost_user.policy"],
1200    srcs: ["x86_64/serial_device_vhost_user.policy"],
1201}
1202
1203prebuilt_usr_share_host {
1204    name: "serial_device_vhost_user.policy_x86_64",
1205    filename: "serial_device_vhost_user.policy",
1206    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
1207    src: ":serial_device_vhost_user.policy_inline_x86_64",
1208}
1209
1210prebuilt_etc {
1211    name: "serial_device_vhost_user.policy",
1212    relative_install_path: "seccomp_policy/crosvm",
1213    arch: {
1214        x86_64: {
1215            src: ":serial_device_vhost_user.policy_inline_x86_64",
1216        },
1217    },
1218    target: {
1219        android_arm64: {
1220            enabled: false,
1221        },
1222        android_arm: {
1223            enabled: false,
1224        },
1225        android_x86: {
1226            enabled: false,
1227        },
1228        android_riscv64: {
1229            enabled: false,
1230        },
1231    },
1232}
1233
1234genrule {
1235    name: "snd_cras_device.policy_inline_x86_64",
1236    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
1237    out: ["snd_cras_device.policy"],
1238    srcs: ["x86_64/snd_cras_device.policy"],
1239}
1240
1241prebuilt_usr_share_host {
1242    name: "snd_cras_device.policy_x86_64",
1243    filename: "snd_cras_device.policy",
1244    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
1245    src: ":snd_cras_device.policy_inline_x86_64",
1246}
1247
1248genrule {
1249    name: "snd_cras_device.policy_inline_aarch64",
1250    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
1251    out: ["snd_cras_device.policy"],
1252    srcs: ["aarch64/snd_cras_device.policy"],
1253}
1254
1255prebuilt_usr_share_host {
1256    name: "snd_cras_device.policy_aarch64",
1257    filename: "snd_cras_device.policy",
1258    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
1259    src: ":snd_cras_device.policy_inline_aarch64",
1260}
1261
1262prebuilt_etc {
1263    name: "snd_cras_device.policy",
1264    relative_install_path: "seccomp_policy/crosvm",
1265    arch: {
1266        x86_64: {
1267            src: ":snd_cras_device.policy_inline_x86_64",
1268        },
1269        arm64: {
1270            src: ":snd_cras_device.policy_inline_aarch64",
1271        },
1272    },
1273    target: {
1274        android_arm: {
1275            enabled: false,
1276        },
1277        android_x86: {
1278            enabled: false,
1279        },
1280        android_riscv64: {
1281            enabled: false,
1282        },
1283    },
1284}
1285
1286genrule {
1287    name: "block_device_vhost_user.policy_inline_x86_64",
1288    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
1289    out: ["block_device_vhost_user.policy"],
1290    srcs: ["x86_64/block_device_vhost_user.policy"],
1291}
1292
1293prebuilt_usr_share_host {
1294    name: "block_device_vhost_user.policy_x86_64",
1295    filename: "block_device_vhost_user.policy",
1296    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
1297    src: ":block_device_vhost_user.policy_inline_x86_64",
1298}
1299
1300prebuilt_etc {
1301    name: "block_device_vhost_user.policy",
1302    relative_install_path: "seccomp_policy/crosvm",
1303    arch: {
1304        x86_64: {
1305            src: ":block_device_vhost_user.policy_inline_x86_64",
1306        },
1307    },
1308    target: {
1309        android_arm64: {
1310            enabled: false,
1311        },
1312        android_arm: {
1313            enabled: false,
1314        },
1315        android_x86: {
1316            enabled: false,
1317        },
1318        android_riscv64: {
1319            enabled: false,
1320        },
1321    },
1322}
1323
1324genrule {
1325    name: "gpu_device.policy_inline_x86_64",
1326    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
1327    out: ["gpu_device.policy"],
1328    srcs: ["x86_64/gpu_device.policy"],
1329}
1330
1331prebuilt_usr_share_host {
1332    name: "gpu_device.policy_x86_64",
1333    filename: "gpu_device.policy",
1334    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
1335    src: ":gpu_device.policy_inline_x86_64",
1336}
1337
1338genrule {
1339    name: "gpu_device.policy_inline_aarch64",
1340    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
1341    out: ["gpu_device.policy"],
1342    srcs: ["aarch64/gpu_device.policy"],
1343}
1344
1345prebuilt_usr_share_host {
1346    name: "gpu_device.policy_aarch64",
1347    filename: "gpu_device.policy",
1348    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
1349    src: ":gpu_device.policy_inline_aarch64",
1350}
1351
1352prebuilt_etc {
1353    name: "gpu_device.policy",
1354    relative_install_path: "seccomp_policy/crosvm",
1355    arch: {
1356        x86_64: {
1357            src: ":gpu_device.policy_inline_x86_64",
1358        },
1359        arm64: {
1360            src: ":gpu_device.policy_inline_aarch64",
1361        },
1362    },
1363    target: {
1364        android_arm: {
1365            enabled: false,
1366        },
1367        android_x86: {
1368            enabled: false,
1369        },
1370        android_riscv64: {
1371            enabled: false,
1372        },
1373    },
1374}
1375
1376genrule {
1377    name: "balloon_device.policy_inline_x86_64",
1378    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
1379    out: ["balloon_device.policy"],
1380    srcs: ["x86_64/balloon_device.policy"],
1381}
1382
1383prebuilt_usr_share_host {
1384    name: "balloon_device.policy_x86_64",
1385    filename: "balloon_device.policy",
1386    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
1387    src: ":balloon_device.policy_inline_x86_64",
1388}
1389
1390genrule {
1391    name: "balloon_device.policy_inline_aarch64",
1392    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
1393    out: ["balloon_device.policy"],
1394    srcs: ["aarch64/balloon_device.policy"],
1395}
1396
1397prebuilt_usr_share_host {
1398    name: "balloon_device.policy_aarch64",
1399    filename: "balloon_device.policy",
1400    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
1401    src: ":balloon_device.policy_inline_aarch64",
1402}
1403
1404prebuilt_etc {
1405    name: "balloon_device.policy",
1406    relative_install_path: "seccomp_policy/crosvm",
1407    arch: {
1408        x86_64: {
1409            src: ":balloon_device.policy_inline_x86_64",
1410        },
1411        arm64: {
1412            src: ":balloon_device.policy_inline_aarch64",
1413        },
1414    },
1415    target: {
1416        android_arm: {
1417            enabled: false,
1418        },
1419        android_x86: {
1420            enabled: false,
1421        },
1422        android_riscv64: {
1423            enabled: false,
1424        },
1425    },
1426}
1427
1428genrule {
1429    name: "fw_cfg_device.policy_inline_x86_64",
1430    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
1431    out: ["fw_cfg_device.policy"],
1432    srcs: ["x86_64/fw_cfg_device.policy"],
1433}
1434
1435prebuilt_usr_share_host {
1436    name: "fw_cfg_device.policy_x86_64",
1437    filename: "fw_cfg_device.policy",
1438    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
1439    src: ":fw_cfg_device.policy_inline_x86_64",
1440}
1441
1442prebuilt_etc {
1443    name: "fw_cfg_device.policy",
1444    relative_install_path: "seccomp_policy/crosvm",
1445    arch: {
1446        x86_64: {
1447            src: ":fw_cfg_device.policy_inline_x86_64",
1448        },
1449    },
1450    target: {
1451        android_arm64: {
1452            enabled: false,
1453        },
1454        android_arm: {
1455            enabled: false,
1456        },
1457        android_x86: {
1458            enabled: false,
1459        },
1460        android_riscv64: {
1461            enabled: false,
1462        },
1463    },
1464}
1465
1466genrule {
1467    name: "pmem_device.policy_inline_x86_64",
1468    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
1469    out: ["pmem_device.policy"],
1470    srcs: ["x86_64/pmem_device.policy"],
1471}
1472
1473prebuilt_usr_share_host {
1474    name: "pmem_device.policy_x86_64",
1475    filename: "pmem_device.policy",
1476    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
1477    src: ":pmem_device.policy_inline_x86_64",
1478}
1479
1480genrule {
1481    name: "pmem_device.policy_inline_aarch64",
1482    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
1483    out: ["pmem_device.policy"],
1484    srcs: ["aarch64/pmem_device.policy"],
1485}
1486
1487prebuilt_usr_share_host {
1488    name: "pmem_device.policy_aarch64",
1489    filename: "pmem_device.policy",
1490    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
1491    src: ":pmem_device.policy_inline_aarch64",
1492}
1493
1494prebuilt_etc {
1495    name: "pmem_device.policy",
1496    relative_install_path: "seccomp_policy/crosvm",
1497    arch: {
1498        x86_64: {
1499            src: ":pmem_device.policy_inline_x86_64",
1500        },
1501        arm64: {
1502            src: ":pmem_device.policy_inline_aarch64",
1503        },
1504    },
1505    target: {
1506        android_arm: {
1507            enabled: false,
1508        },
1509        android_x86: {
1510            enabled: false,
1511        },
1512        android_riscv64: {
1513            enabled: false,
1514        },
1515    },
1516}
1517
1518genrule {
1519    name: "serial_device.policy_inline_x86_64",
1520    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
1521    out: ["serial_device.policy"],
1522    srcs: ["x86_64/serial_device.policy"],
1523}
1524
1525prebuilt_usr_share_host {
1526    name: "serial_device.policy_x86_64",
1527    filename: "serial_device.policy",
1528    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
1529    src: ":serial_device.policy_inline_x86_64",
1530}
1531
1532genrule {
1533    name: "serial_device.policy_inline_aarch64",
1534    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
1535    out: ["serial_device.policy"],
1536    srcs: ["aarch64/serial_device.policy"],
1537}
1538
1539prebuilt_usr_share_host {
1540    name: "serial_device.policy_aarch64",
1541    filename: "serial_device.policy",
1542    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
1543    src: ":serial_device.policy_inline_aarch64",
1544}
1545
1546prebuilt_etc {
1547    name: "serial_device.policy",
1548    relative_install_path: "seccomp_policy/crosvm",
1549    arch: {
1550        x86_64: {
1551            src: ":serial_device.policy_inline_x86_64",
1552        },
1553        arm64: {
1554            src: ":serial_device.policy_inline_aarch64",
1555        },
1556    },
1557    target: {
1558        android_arm: {
1559            enabled: false,
1560        },
1561        android_x86: {
1562            enabled: false,
1563        },
1564        android_riscv64: {
1565            enabled: false,
1566        },
1567    },
1568}
1569