configure seccomp_policy for android O

phenomenall · Jan 16, 2018 · ef85ab7 · ef85ab7
1 parent 8ab76a4
commit ef85ab7
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 0 deletions.
diff --git a/product/seccomp_policy.mk b/product/seccomp_policy.mk
@@ -0,0 +1,3 @@
+# Seccomp policy
+PRODUCT_COPY_FILES += \
+    $(LOCAL_PATH)/seccomp_policy/mediacodec.policy:system/vendor/etc/seccomp_policy/mediacodec.policy
diff --git a/seccomp_policy/mediacodec.policy b/seccomp_policy/mediacodec.policy
@@ -0,0 +1,12 @@
+# device specific syscalls
+# extension of services/mediacodec/minijail/seccomp_policy/mediacodec-seccomp-arm.policy
+pselect6: 1
+eventfd2: 1
+sendto: 1
+recvfrom: 1
+_llseek: 1
+sysinfo: 1
+getcwd: 1
+getdents64: 1
+inotify_init1: 1
+inotify_add_watch: 1
diff --git a/seccomp_policy/mediaextractor.policy b/seccomp_policy/mediaextractor.policy
@@ -0,0 +1,4 @@
+# device specific syscalls.
+# extension of services/mediaextractor/minijail/seccomp_policy/mediaextractor-seccomp-arm.policy
+readlinkat: 1
+pread64: 1