mediacodec: Allow select and eventfd syscalls
Add pselect6 and eventfd2 syscalls Includes following: mediacodec: allow sendto and recvfrom syscalls mediacodec: allow lseek syscall mediaextractor: allow pread64 and readlinkat syscalls mediacodec: allow getdents64, sysinfo and getcwd Vendor extended policy files are separated from the aosp and will now reside in /vendor Change-Id: If59d04b36d744efb74209ae36e76dd16cb18f606 CRs-Fixed: 2027600 Signed-off-by: DennySPb <dennyspb@gmail.com>
This commit is contained in:
parent
8539d92482
commit
75a7af3a6c
3 changed files with 19 additions and 0 deletions
|
@ -188,6 +188,11 @@ PRODUCT_COPY_FILES += \
|
|||
$(LOCAL_PATH)/configs/media_profiles_vendor.xml:$(TARGET_COPY_OUT_VENDOR)/etc/media_profiles_vendor.xml \
|
||||
$(LOCAL_PATH)/configs/system_properties.xml:$(TARGET_COPY_OUT_VENDOR)/etc/system_properties.xml
|
||||
|
||||
# Seccomp policy
|
||||
PRODUCT_COPY_FILES += \
|
||||
$(LOCAL_PATH)/seccomp/mediacodec-seccomp.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/mediacodec.policy \
|
||||
$(LOCAL_PATH)/seccomp/mediaextractor-seccomp.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/mediaextractor.policy
|
||||
|
||||
PRODUCT_PACKAGES += \
|
||||
libmediaplayerservice
|
||||
|
||||
|
|
10
seccomp/mediacodec-seccomp.policy
Normal file
10
seccomp/mediacodec-seccomp.policy
Normal file
|
@ -0,0 +1,10 @@
|
|||
# device specific syscalls
|
||||
# extension of services/mediacodec/minijail/seccomp_policy/mediacodec-seccomp-arm.policy
|
||||
pselect6: 1
|
||||
eventfd2: 1
|
||||
sendto: 1
|
||||
recvfrom: 1
|
||||
_llseek: 1
|
||||
sysinfo: 1
|
||||
getcwd: 1
|
||||
getdents64: 1
|
4
seccomp/mediaextractor-seccomp.policy
Normal file
4
seccomp/mediaextractor-seccomp.policy
Normal file
|
@ -0,0 +1,4 @@
|
|||
# device specific syscalls.
|
||||
# extension of services/mediaextractor/minijail/seccomp_policy/mediaextractor-seccomp-arm.policy
|
||||
readlinkat: 1
|
||||
pread64: 1
|
Loading…
Reference in a new issue