New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 906913 link

Starred by 1 user
Status: Fixed
Owner:
amoylan@chromium.org
Closed: Dec 18
Cc:
█ alanlxl@chromium.org
martis@chromium.org
napper@chromium.org
█ claudiomagni@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 3
Type: Bug



Sign in to add a comment

ML Service: add seccomp policy for arm64

Project Member Reported by martis@google.com, Nov 20 
On boards with ARM64 userspace (e.g. kevin64), emerge of the ML service fails with:
!!! newins: seccomp/ml_service-seccomp-arm64.policy does not exist

We should create a seccomp policy for arm64.

Comment 1 by amoylan@chromium.org, Nov 20 

Ah yes. Interesting. To get the seccomp policy right will require a Kevin
device that we can put a kevin64 on I suppose.
I will look into it.
In the meantime an empty seccomp should at least solve the compile issue,
though ML Service won't be runnable under minijail0 (manual run using sudo
as ml-service user should be fine for development).

Comment 2 by amoylan@chromium.org, Dec 11

Cc: napper@chromium.org claudiomagni@chromium.org martis@chromium.org alanlxl@chromium.org
To create a realistic seccomp, I need to run ML Service on a real device.
To run ML Service, I need to flash a kevin with kevin64.
To create kevin64, I need to build_packages.
build_packages fails on dev-rust/ due to ... a different missing seccomp file!
Project Member

Comment 3 by bugdroid1@chromium.org, Dec 18 

The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/platform2/+/2f7c2ec8d1c82239780877db83b0593c2101cf2c

commit 2f7c2ec8d1c82239780877db83b0593c2101cf2c
Author: Andrew Moylan <amoylan@chromium.org>
Date: Tue Dec 18 04:47:05 2018

ml: Add seccomp policy for arm64 architecture

BUG= chromium:906913 
TEST=Exercised ML Service with a local Chrome patch

Change-Id: I9305ff4e398d0f453c762a47ef09a87fcded9f76
Reviewed-on: https://chromium-review.googlesource.com/1377793
Commit-Ready: ChromeOS CL Exonerator Bot <chromiumos-cl-exonerator@appspot.gserviceaccount.com>
Tested-by: Andrew Moylan <amoylan@chromium.org>
Reviewed-by: Manoj Gupta <manojgupta@chromium.org>

[add] https://crrev.com/2f7c2ec8d1c82239780877db83b0593c2101cf2c/ml/seccomp/ml_service-seccomp-arm64.policy

Comment 4 by amoylan@chromium.org, Dec 18

Status: Fixed (was: Assigned)
►

Sign in to add a comment