xref: /aosp_15_r20/external/crosvm/jail/seccomp/Android.bp (revision bb4ee6a4ae7042d18b07a98463b9c8b875e44b39)

// Autogenerated via gen_android.sh
//
// Copyright (C) 2020 The Android Open Source Project
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//      http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

// DO NOT MODIFY DIRECTLY, ALL CHANGES WILL BE OVERWRITTEN BY gen_android.sh

package {
    // See: http://go/android-license-faq
    // A large-scale-change added 'default_applicable_licenses' to import
    // all of the 'license_kinds' from "external_crosvm_license"
    // to get the below license kinds:
    //   SPDX-license-identifier-Apache-2.0
    //   SPDX-license-identifier-BSD
    default_applicable_licenses: ["external_crosvm_license"],
}

python_binary_host {
    name: "detect_duplication",
    main: "detect_duplication.py",
    srcs: [
        "detect_duplication.py",
    ],
}

genrule_defaults {
    name: "crosvm_inline_seccomp_policy_x86_64",
    cmd: "set -o pipefail; $(location policy-inliner.sh) $(location x86_64/common_device.policy) $(location x86_64/gpu_common.policy) $(location x86_64/serial.policy) $(location x86_64/net.policy) $(location x86_64/block.policy) $(location x86_64/vhost_user.policy) $(location x86_64/vhost_vsock.policy) < $(in) | $(location detect_duplication) > $(out)",
    tools: [
        "detect_duplication",
    ],
    tool_files: [
        "policy-inliner.sh",
        "x86_64/common_device.policy",
        "x86_64/gpu_common.policy",
        "x86_64/serial.policy",
        "x86_64/net.policy",
        "x86_64/block.policy",
        "x86_64/vhost_user.policy",
        "x86_64/vhost_vsock.policy",
    ],
}

genrule_defaults {
    name: "crosvm_inline_seccomp_policy_aarch64",
    cmd: "set -o pipefail; $(location policy-inliner.sh) $(location aarch64/common_device.policy) $(location aarch64/gpu_common.policy) $(location aarch64/serial.policy) $(location aarch64/net.policy) DOESNT_EXIST DOESNT_EXIST DOESNT_EXIST DOESNT_EXIST < $(in) | $(location detect_duplication) > $(out)",
    tools: [
        "detect_duplication",
    ],
    tool_files: [
        "policy-inliner.sh",
        "aarch64/common_device.policy",
        "aarch64/gpu_common.policy",
        "aarch64/serial.policy",
        "aarch64/net.policy",
    ],
}

genrule {
    name: "vhost_net_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["vhost_net_device.policy"],
    srcs: ["x86_64/vhost_net_device.policy"],
}

prebuilt_usr_share_host {
    name: "vhost_net_device.policy_x86_64",
    filename: "vhost_net_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":vhost_net_device.policy_inline_x86_64",
}

genrule {
    name: "vhost_net_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["vhost_net_device.policy"],
    srcs: ["aarch64/vhost_net_device.policy"],
}

prebuilt_usr_share_host {
    name: "vhost_net_device.policy_aarch64",
    filename: "vhost_net_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":vhost_net_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "vhost_net_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":vhost_net_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":vhost_net_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "input_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["input_device.policy"],
    srcs: ["x86_64/input_device.policy"],
}

prebuilt_usr_share_host {
    name: "input_device.policy_x86_64",
    filename: "input_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":input_device.policy_inline_x86_64",
}

genrule {
    name: "input_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["input_device.policy"],
    srcs: ["aarch64/input_device.policy"],
}

prebuilt_usr_share_host {
    name: "input_device.policy_aarch64",
    filename: "input_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":input_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "input_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":input_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":input_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "wl_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["wl_device.policy"],
    srcs: ["x86_64/wl_device.policy"],
}

prebuilt_usr_share_host {
    name: "wl_device.policy_x86_64",
    filename: "wl_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":wl_device.policy_inline_x86_64",
}

genrule {
    name: "wl_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["wl_device.policy"],
    srcs: ["aarch64/wl_device.policy"],
}

prebuilt_usr_share_host {
    name: "wl_device.policy_aarch64",
    filename: "wl_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":wl_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "wl_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":wl_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":wl_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "net_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["net_device.policy"],
    srcs: ["x86_64/net_device.policy"],
}

prebuilt_usr_share_host {
    name: "net_device.policy_x86_64",
    filename: "net_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":net_device.policy_inline_x86_64",
}

genrule {
    name: "net_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["net_device.policy"],
    srcs: ["aarch64/net_device.policy"],
}

prebuilt_usr_share_host {
    name: "net_device.policy_aarch64",
    filename: "net_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":net_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "net_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":net_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":net_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "9p_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["9p_device.policy"],
    srcs: ["x86_64/9p_device.policy"],
}

prebuilt_usr_share_host {
    name: "9p_device.policy_x86_64",
    filename: "9p_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":9p_device.policy_inline_x86_64",
}

genrule {
    name: "9p_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["9p_device.policy"],
    srcs: ["aarch64/9p_device.policy"],
}

prebuilt_usr_share_host {
    name: "9p_device.policy_aarch64",
    filename: "9p_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":9p_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "9p_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":9p_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":9p_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "vhost_scmi_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["vhost_scmi_device.policy"],
    srcs: ["aarch64/vhost_scmi_device.policy"],
}

prebuilt_usr_share_host {
    name: "vhost_scmi_device.policy_aarch64",
    filename: "vhost_scmi_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":vhost_scmi_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "vhost_scmi_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        arm64: {
            src: ":vhost_scmi_device.policy_inline_aarch64",
        },
    },
    target: {
        android_x86_64: {
            enabled: false,
        },
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "cras_audio_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["cras_audio_device.policy"],
    srcs: ["x86_64/cras_audio_device.policy"],
}

prebuilt_usr_share_host {
    name: "cras_audio_device.policy_x86_64",
    filename: "cras_audio_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":cras_audio_device.policy_inline_x86_64",
}

genrule {
    name: "cras_audio_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["cras_audio_device.policy"],
    srcs: ["aarch64/cras_audio_device.policy"],
}

prebuilt_usr_share_host {
    name: "cras_audio_device.policy_aarch64",
    filename: "cras_audio_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":cras_audio_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "cras_audio_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":cras_audio_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":cras_audio_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "vfio_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["vfio_device.policy"],
    srcs: ["x86_64/vfio_device.policy"],
}

prebuilt_usr_share_host {
    name: "vfio_device.policy_x86_64",
    filename: "vfio_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":vfio_device.policy_inline_x86_64",
}

prebuilt_etc {
    name: "vfio_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":vfio_device.policy_inline_x86_64",
        },
    },
    target: {
        android_arm64: {
            enabled: false,
        },
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "vhost_vsock_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["vhost_vsock_device.policy"],
    srcs: ["x86_64/vhost_vsock_device.policy"],
}

prebuilt_usr_share_host {
    name: "vhost_vsock_device.policy_x86_64",
    filename: "vhost_vsock_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":vhost_vsock_device.policy_inline_x86_64",
}

genrule {
    name: "vhost_vsock_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["vhost_vsock_device.policy"],
    srcs: ["aarch64/vhost_vsock_device.policy"],
}

prebuilt_usr_share_host {
    name: "vhost_vsock_device.policy_aarch64",
    filename: "vhost_vsock_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":vhost_vsock_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "vhost_vsock_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":vhost_vsock_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":vhost_vsock_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "gpu_render_server.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["gpu_render_server.policy"],
    srcs: ["x86_64/gpu_render_server.policy"],
}

prebuilt_usr_share_host {
    name: "gpu_render_server.policy_x86_64",
    filename: "gpu_render_server.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":gpu_render_server.policy_inline_x86_64",
}

genrule {
    name: "gpu_render_server.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["gpu_render_server.policy"],
    srcs: ["aarch64/gpu_render_server.policy"],
}

prebuilt_usr_share_host {
    name: "gpu_render_server.policy_aarch64",
    filename: "gpu_render_server.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":gpu_render_server.policy_inline_aarch64",
}

prebuilt_etc {
    name: "gpu_render_server.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":gpu_render_server.policy_inline_x86_64",
        },
        arm64: {
            src: ":gpu_render_server.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "block_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["block_device.policy"],
    srcs: ["x86_64/block_device.policy"],
}

prebuilt_usr_share_host {
    name: "block_device.policy_x86_64",
    filename: "block_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":block_device.policy_inline_x86_64",
}

genrule {
    name: "block_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["block_device.policy"],
    srcs: ["aarch64/block_device.policy"],
}

prebuilt_usr_share_host {
    name: "block_device.policy_aarch64",
    filename: "block_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":block_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "block_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":block_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":block_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "vtpm_proxy_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["vtpm_proxy_device.policy"],
    srcs: ["x86_64/vtpm_proxy_device.policy"],
}

prebuilt_usr_share_host {
    name: "vtpm_proxy_device.policy_x86_64",
    filename: "vtpm_proxy_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":vtpm_proxy_device.policy_inline_x86_64",
}

prebuilt_etc {
    name: "vtpm_proxy_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":vtpm_proxy_device.policy_inline_x86_64",
        },
    },
    target: {
        android_arm64: {
            enabled: false,
        },
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "vios_audio_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["vios_audio_device.policy"],
    srcs: ["x86_64/vios_audio_device.policy"],
}

prebuilt_usr_share_host {
    name: "vios_audio_device.policy_x86_64",
    filename: "vios_audio_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":vios_audio_device.policy_inline_x86_64",
}

genrule {
    name: "vios_audio_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["vios_audio_device.policy"],
    srcs: ["aarch64/vios_audio_device.policy"],
}

prebuilt_usr_share_host {
    name: "vios_audio_device.policy_aarch64",
    filename: "vios_audio_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":vios_audio_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "vios_audio_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":vios_audio_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":vios_audio_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "fs_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["fs_device.policy"],
    srcs: ["x86_64/fs_device.policy"],
}

prebuilt_usr_share_host {
    name: "fs_device.policy_x86_64",
    filename: "fs_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":fs_device.policy_inline_x86_64",
}

genrule {
    name: "fs_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["fs_device.policy"],
    srcs: ["aarch64/fs_device.policy"],
}

prebuilt_usr_share_host {
    name: "fs_device.policy_aarch64",
    filename: "fs_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":fs_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "fs_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":fs_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":fs_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "jail_warden.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["jail_warden.policy"],
    srcs: ["x86_64/jail_warden.policy"],
}

prebuilt_usr_share_host {
    name: "jail_warden.policy_x86_64",
    filename: "jail_warden.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":jail_warden.policy_inline_x86_64",
}

prebuilt_etc {
    name: "jail_warden.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":jail_warden.policy_inline_x86_64",
        },
    },
    target: {
        android_arm64: {
            enabled: false,
        },
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "iommu_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["iommu_device.policy"],
    srcs: ["x86_64/iommu_device.policy"],
}

prebuilt_usr_share_host {
    name: "iommu_device.policy_x86_64",
    filename: "iommu_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":iommu_device.policy_inline_x86_64",
}

prebuilt_etc {
    name: "iommu_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":iommu_device.policy_inline_x86_64",
        },
    },
    target: {
        android_arm64: {
            enabled: false,
        },
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "snd_null_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["snd_null_device.policy"],
    srcs: ["x86_64/snd_null_device.policy"],
}

prebuilt_usr_share_host {
    name: "snd_null_device.policy_x86_64",
    filename: "snd_null_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":snd_null_device.policy_inline_x86_64",
}

genrule {
    name: "snd_null_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["snd_null_device.policy"],
    srcs: ["aarch64/snd_null_device.policy"],
}

prebuilt_usr_share_host {
    name: "snd_null_device.policy_aarch64",
    filename: "snd_null_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":snd_null_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "snd_null_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":snd_null_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":snd_null_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "xhci_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["xhci_device.policy"],
    srcs: ["x86_64/xhci_device.policy"],
}

prebuilt_usr_share_host {
    name: "xhci_device.policy_x86_64",
    filename: "xhci_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":xhci_device.policy_inline_x86_64",
}

genrule {
    name: "xhci_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["xhci_device.policy"],
    srcs: ["aarch64/xhci_device.policy"],
}

prebuilt_usr_share_host {
    name: "xhci_device.policy_aarch64",
    filename: "xhci_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":xhci_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "xhci_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":xhci_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":xhci_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "rng_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["rng_device.policy"],
    srcs: ["x86_64/rng_device.policy"],
}

prebuilt_usr_share_host {
    name: "rng_device.policy_x86_64",
    filename: "rng_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":rng_device.policy_inline_x86_64",
}

genrule {
    name: "rng_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["rng_device.policy"],
    srcs: ["aarch64/rng_device.policy"],
}

prebuilt_usr_share_host {
    name: "rng_device.policy_aarch64",
    filename: "rng_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":rng_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "rng_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":rng_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":rng_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "null_audio_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["null_audio_device.policy"],
    srcs: ["x86_64/null_audio_device.policy"],
}

prebuilt_usr_share_host {
    name: "null_audio_device.policy_x86_64",
    filename: "null_audio_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":null_audio_device.policy_inline_x86_64",
}

genrule {
    name: "null_audio_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["null_audio_device.policy"],
    srcs: ["aarch64/null_audio_device.policy"],
}

prebuilt_usr_share_host {
    name: "null_audio_device.policy_aarch64",
    filename: "null_audio_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":null_audio_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "null_audio_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":null_audio_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":null_audio_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "battery.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["battery.policy"],
    srcs: ["x86_64/battery.policy"],
}

prebuilt_usr_share_host {
    name: "battery.policy_x86_64",
    filename: "battery.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":battery.policy_inline_x86_64",
}

genrule {
    name: "battery.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["battery.policy"],
    srcs: ["aarch64/battery.policy"],
}

prebuilt_usr_share_host {
    name: "battery.policy_aarch64",
    filename: "battery.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":battery.policy_inline_aarch64",
}

prebuilt_etc {
    name: "battery.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":battery.policy_inline_x86_64",
        },
        arm64: {
            src: ":battery.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "video_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["video_device.policy"],
    srcs: ["x86_64/video_device.policy"],
}

prebuilt_usr_share_host {
    name: "video_device.policy_x86_64",
    filename: "video_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":video_device.policy_inline_x86_64",
}

genrule {
    name: "video_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["video_device.policy"],
    srcs: ["aarch64/video_device.policy"],
}

prebuilt_usr_share_host {
    name: "video_device.policy_aarch64",
    filename: "video_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":video_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "video_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":video_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":video_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "coiommu_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["coiommu_device.policy"],
    srcs: ["x86_64/coiommu_device.policy"],
}

prebuilt_usr_share_host {
    name: "coiommu_device.policy_x86_64",
    filename: "coiommu_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":coiommu_device.policy_inline_x86_64",
}

genrule {
    name: "coiommu_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["coiommu_device.policy"],
    srcs: ["aarch64/coiommu_device.policy"],
}

prebuilt_usr_share_host {
    name: "coiommu_device.policy_aarch64",
    filename: "coiommu_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":coiommu_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "coiommu_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":coiommu_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":coiommu_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "serial_device_vhost_user.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["serial_device_vhost_user.policy"],
    srcs: ["x86_64/serial_device_vhost_user.policy"],
}

prebuilt_usr_share_host {
    name: "serial_device_vhost_user.policy_x86_64",
    filename: "serial_device_vhost_user.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":serial_device_vhost_user.policy_inline_x86_64",
}

prebuilt_etc {
    name: "serial_device_vhost_user.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":serial_device_vhost_user.policy_inline_x86_64",
        },
    },
    target: {
        android_arm64: {
            enabled: false,
        },
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "snd_cras_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["snd_cras_device.policy"],
    srcs: ["x86_64/snd_cras_device.policy"],
}

prebuilt_usr_share_host {
    name: "snd_cras_device.policy_x86_64",
    filename: "snd_cras_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":snd_cras_device.policy_inline_x86_64",
}

genrule {
    name: "snd_cras_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["snd_cras_device.policy"],
    srcs: ["aarch64/snd_cras_device.policy"],
}

prebuilt_usr_share_host {
    name: "snd_cras_device.policy_aarch64",
    filename: "snd_cras_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":snd_cras_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "snd_cras_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":snd_cras_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":snd_cras_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "block_device_vhost_user.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["block_device_vhost_user.policy"],
    srcs: ["x86_64/block_device_vhost_user.policy"],
}

prebuilt_usr_share_host {
    name: "block_device_vhost_user.policy_x86_64",
    filename: "block_device_vhost_user.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":block_device_vhost_user.policy_inline_x86_64",
}

prebuilt_etc {
    name: "block_device_vhost_user.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":block_device_vhost_user.policy_inline_x86_64",
        },
    },
    target: {
        android_arm64: {
            enabled: false,
        },
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "gpu_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["gpu_device.policy"],
    srcs: ["x86_64/gpu_device.policy"],
}

prebuilt_usr_share_host {
    name: "gpu_device.policy_x86_64",
    filename: "gpu_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":gpu_device.policy_inline_x86_64",
}

genrule {
    name: "gpu_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["gpu_device.policy"],
    srcs: ["aarch64/gpu_device.policy"],
}

prebuilt_usr_share_host {
    name: "gpu_device.policy_aarch64",
    filename: "gpu_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":gpu_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "gpu_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":gpu_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":gpu_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "balloon_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["balloon_device.policy"],
    srcs: ["x86_64/balloon_device.policy"],
}

prebuilt_usr_share_host {
    name: "balloon_device.policy_x86_64",
    filename: "balloon_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":balloon_device.policy_inline_x86_64",
}

genrule {
    name: "balloon_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["balloon_device.policy"],
    srcs: ["aarch64/balloon_device.policy"],
}

prebuilt_usr_share_host {
    name: "balloon_device.policy_aarch64",
    filename: "balloon_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":balloon_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "balloon_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":balloon_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":balloon_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "fw_cfg_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["fw_cfg_device.policy"],
    srcs: ["x86_64/fw_cfg_device.policy"],
}

prebuilt_usr_share_host {
    name: "fw_cfg_device.policy_x86_64",
    filename: "fw_cfg_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":fw_cfg_device.policy_inline_x86_64",
}

prebuilt_etc {
    name: "fw_cfg_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":fw_cfg_device.policy_inline_x86_64",
        },
    },
    target: {
        android_arm64: {
            enabled: false,
        },
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "pmem_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["pmem_device.policy"],
    srcs: ["x86_64/pmem_device.policy"],
}

prebuilt_usr_share_host {
    name: "pmem_device.policy_x86_64",
    filename: "pmem_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":pmem_device.policy_inline_x86_64",
}

genrule {
    name: "pmem_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["pmem_device.policy"],
    srcs: ["aarch64/pmem_device.policy"],
}

prebuilt_usr_share_host {
    name: "pmem_device.policy_aarch64",
    filename: "pmem_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":pmem_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "pmem_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":pmem_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":pmem_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}

genrule {
    name: "serial_device.policy_inline_x86_64",
    defaults: ["crosvm_inline_seccomp_policy_x86_64"],
    out: ["serial_device.policy"],
    srcs: ["x86_64/serial_device.policy"],
}

prebuilt_usr_share_host {
    name: "serial_device.policy_x86_64",
    filename: "serial_device.policy",
    relative_install_path: "crosvm/x86_64-linux-gnu/seccomp",
    src: ":serial_device.policy_inline_x86_64",
}

genrule {
    name: "serial_device.policy_inline_aarch64",
    defaults: ["crosvm_inline_seccomp_policy_aarch64"],
    out: ["serial_device.policy"],
    srcs: ["aarch64/serial_device.policy"],
}

prebuilt_usr_share_host {
    name: "serial_device.policy_aarch64",
    filename: "serial_device.policy",
    relative_install_path: "crosvm/aarch64-linux-gnu/seccomp",
    src: ":serial_device.policy_inline_aarch64",
}

prebuilt_etc {
    name: "serial_device.policy",
    relative_install_path: "seccomp_policy/crosvm",
    arch: {
        x86_64: {
            src: ":serial_device.policy_inline_x86_64",
        },
        arm64: {
            src: ":serial_device.policy_inline_aarch64",
        },
    },
    target: {
        android_arm: {
            enabled: false,
        },
        android_x86: {
            enabled: false,
        },
        android_riscv64: {
            enabled: false,
        },
    },
}