Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 0038f133 authored Feb 02, 2019 by TreeHugger Robot Committed by Android (Google) Code Review Feb 02, 2019

Merge "Add memfd related missing syscalls to allowed list"

parents 612be7ff 3c49347c

services/mediacodec/seccomp_policy/mediacodec-arm.policy

+1 −0

Original line number	Diff line number	Diff line
		@@ -14,6 +14,7 @@ ppoll: 1
		mmap2: 1
		getrandom: 1
		memfd_create: 1
		ftruncate: 1
		ftruncate64: 1

		# mremap: Ensure \|flags\| are (MREMAP_MAYMOVE \| MREMAP_FIXED) TODO: Once minijail

services/mediacodec/seccomp_policy/mediacodec-x86.policy

+3 −0

Original line number	Diff line number	Diff line
		@@ -55,6 +55,9 @@ write: 1
		nanosleep: 1
		sched_setscheduler: 1
		uname: 1
		memfd_create: 1
		ftruncate: 1
		ftruncate64: 1

		# Required by AddressSanitizer
		gettid: 1

services/mediacodec/seccomp_policy/mediaswcodec-arm.policy

+1 −0

Original line number	Diff line number	Diff line
		@@ -22,6 +22,7 @@ ppoll: 1
		mprotect: arg2 in ~PROT_EXEC \|\| arg2 in ~PROT_WRITE
		mmap2: arg2 in ~PROT_EXEC \|\| arg2 in ~PROT_WRITE
		memfd_create: 1
		ftruncate: 1
		ftruncate64: 1

		# mremap: Ensure \|flags\| are (MREMAP_MAYMOVE \| MREMAP_FIXED) TODO: Once minijail

services/mediacodec/seccomp_policy/mediaswcodec-arm64.policy

+1 −0

Original line number	Diff line number	Diff line
		@@ -27,6 +27,7 @@ fstat: 1
		newfstatat: 1
		fstatfs: 1
		memfd_create: 1
		ftruncate: 1
		ftruncate64: 1

		# mremap: Ensure \|flags\| are (MREMAP_MAYMOVE \| MREMAP_FIXED) TODO: Once minijail