msm8974-common: Add seccomp policy
Change-Id: I1d5017228a4a9318f8a77ef4036532d64718ecbb
This commit is contained in:
parent
9e14a9cbdf
commit
84b97c9d61
@ -142,6 +142,11 @@ PRODUCT_PACKAGES += \
|
||||
PRODUCT_PACKAGES += \
|
||||
android.hardware.renderscript@1.0-impl
|
||||
|
||||
# Seccomp
|
||||
PRODUCT_COPY_FILES += \
|
||||
$(LOCAL_PATH)/seccomp/mediacodec.policy:system/vendor/etc/seccomp_policy/mediacodec.policy \
|
||||
$(LOCAL_PATH)/seccomp/mediaextractor.policy:system/vendor/etc/seccomp_policy/mediaextractor.policy
|
||||
|
||||
# Sensors
|
||||
PRODUCT_PACKAGES += \
|
||||
android.hardware.sensors@1.0-impl
|
||||
|
7
seccomp/mediacodec.policy
Normal file
7
seccomp/mediacodec.policy
Normal file
@ -0,0 +1,7 @@
|
||||
# device specific syscalls
|
||||
# extension of services/mediacodec/minijail/seccomp_policy/mediacodec-seccomp-arm.policy
|
||||
pselect6: 1
|
||||
eventfd2: 1
|
||||
sendto: 1
|
||||
recvfrom: 1
|
||||
_llseek: 1
|
4
seccomp/mediaextractor.policy
Normal file
4
seccomp/mediaextractor.policy
Normal file
@ -0,0 +1,4 @@
|
||||
# device specific syscalls.
|
||||
# extension of services/mediaextractor/minijail/seccomp_policy/mediaextractor-seccomp-arm.policy
|
||||
readlinkat: 1
|
||||
pread64: 1
|
Loading…
Reference in New Issue
Block a user