1# Copyright 2023 The ChromiumOS Authors 2# Use of this source code is governed by a BSD-style license that can be 3# found in the LICENSE file. 4 5@include /usr/share/policy/crosvm/common_device.policy 6 7# Allow vhost_scmi ioctls only. 8# arg1 == VHOST_GET_FEATURES || 9# arg1 == VHOST_SET_FEATURES || 10# arg1 == VHOST_SET_OWNER || 11# arg1 == VHOST_RESET_OWNER || 12# arg1 == VHOST_SET_MEM_TABLE || 13# arg1 == VHOST_SET_LOG_BASE || 14# arg1 == VHOST_SET_LOG_FD || 15# arg1 == VHOST_SET_VRING_NUM || 16# arg1 == VHOST_SET_VRING_ADDR || 17# arg1 == VHOST_SET_VRING_BASE || 18# arg1 == VHOST_GET_VRING_BASE || 19# arg1 == VHOST_SET_VRING_KICK || 20# arg1 == VHOST_SET_VRING_CALL || 21# arg1 == VHOST_SET_VRING_ERR || 22ioctl: arg1 == 0x8008af00 || arg1 == 0x4008af00 || arg1 == 0x0000af01 || arg1 == 0x0000af02 || arg1 == 0x4008af03 || arg1 == 0x4008af04 || arg1 == 0x4004af07 || arg1 == 0x4008af10 || arg1 == 0x4028af11 || arg1 == 0x4008af12 || arg1 == 0xc008af12 || arg1 == 0x4008af20 || arg1 == 0x4008af21 || arg1 == 0x4008af22 23open: return ENOENT 24openat: return ENOENT 25prctl: arg0 == PR_SET_NAME 26