From c4c9c2f895e3d6befc8a210d29a698743c8fe013 Mon Sep 17 00:00:00 2001 From: Deokgyu Yang Date: Thu, 20 May 2021 11:18:23 +0900 Subject: [PATCH] gts3l: seccomp: Add mediaextractor.policy Signed-off-by: Deokgyu Yang Change-Id: I56cf60a9f8acf86e9884a94c4ef26c751973ebca --- device.mk | 3 ++- seccomp/mediaextractor.policy | 5 +++++ 2 files changed, 7 insertions(+), 1 deletion(-) create mode 100644 seccomp/mediaextractor.policy diff --git a/device.mk b/device.mk index 2a35591..3f38169 100755 --- a/device.mk +++ b/device.mk @@ -341,7 +341,8 @@ PRODUCT_PACKAGES += \ # Seccomp policy PRODUCT_COPY_FILES += \ - $(LOCAL_PATH)/seccomp/mediacodec.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/mediacodec.policy + $(LOCAL_PATH)/seccomp/mediacodec.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/mediacodec.policy \ + $(LOCAL_PATH)/seccomp/mediaextractor.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/mediaextractor.policy # Sensors PRODUCT_PACKAGES += \ diff --git a/seccomp/mediaextractor.policy b/seccomp/mediaextractor.policy new file mode 100644 index 0000000..0fcf604 --- /dev/null +++ b/seccomp/mediaextractor.policy @@ -0,0 +1,5 @@ +# device specific syscalls. +# extension of services/mediaextractor/minijail/seccomp_policy/mediaextractor-seccomp-arm.policy +readlinkat: 1 +pread64: 1 +mremap: 1