New issue
Advanced search Search tips

Issue 886535 link

Starred by 2 users
Status: Fixed
Owner:
chirantan@chromium.org
Closed: Sep 24
Cc:
slangley@chromium.org
tbuck...@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 1
Type: Bug



Sign in to add a comment

Seneschal SharePath fails with libminijail bocked syscall newfstatat

Project Member Reported by joelhockey@chromium.org, Sep 19 
Seneschal SharePath fails with error:

2018-09-18T17:37:41.285775-07:00 ERR 9s[3267]: libminijail[2]: blocked syscall: newfstatat

This is blocking the use of 'Share with Linux' from FilesApp.

Comment 1 by chirantan@chromium.org, Sep 19 

The fix is here: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/1232556


You can unblock yourself before the change lands by adding

    newfstatat: 1

to /usr/share/policy/crosvm/9s.policy for x86 devices.  For arm devices you will instead need to do:

    fstatat64: 1
Project Member

Comment 2 by bugdroid1@chromium.org, Sep 22 

The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/platform/crosvm/+/0a4f280e3a1c3ba77e1efa37c18bbdcea03a0d64

commit 0a4f280e3a1c3ba77e1efa37c18bbdcea03a0d64
Author: Chirantan Ekbote <chirantan@chromium.org>
Date: Sat Sep 22 02:50:12 2018

seccomp: Update 9p policy

Add newfstatat for x86 and fstatat64 for arm to the seccomp policy file
for the 9p device and server program.

BUG= chromium:886535 
TEST=`vmc share termina foo` and then `ls /mnt/shared` inside the VM
     works

Change-Id: I6871f54ae885e080dca0ea5751987d59c55a59d6
Signed-off-by: Chirantan Ekbote <chirantan@chromium.org>
Reviewed-on: https://chromium-review.googlesource.com/1232556
Reviewed-by: Stephen Barber <smbarber@chromium.org>

[modify] https://crrev.com/0a4f280e3a1c3ba77e1efa37c18bbdcea03a0d64/seccomp/arm/9s.policy
[modify] https://crrev.com/0a4f280e3a1c3ba77e1efa37c18bbdcea03a0d64/seccomp/arm/9p_device.policy
[modify] https://crrev.com/0a4f280e3a1c3ba77e1efa37c18bbdcea03a0d64/seccomp/x86_64/9p_device.policy
[modify] https://crrev.com/0a4f280e3a1c3ba77e1efa37c18bbdcea03a0d64/seccomp/x86_64/9s.policy

Comment 3 by chirantan@chromium.org, Sep 24

Status: Fixed (was: Assigned)
►

Sign in to add a comment