Merge "Makes sure to set up the mediaextractor x86_64 seccomp policy." (07827061) · Commits · e / os / android_frameworks_av

services/mediaextractor/Android.mk

+1 −0

Original line number	Diff line number	Diff line
		@@ -18,6 +18,7 @@ include $(CLEAR_VARS)
		LOCAL_REQUIRED_MODULES_arm := crash_dump.policy mediaextractor.policy
		LOCAL_REQUIRED_MODULES_arm64 := crash_dump.policy mediaextractor.policy
		LOCAL_REQUIRED_MODULES_x86 := crash_dump.policy mediaextractor.policy
		LOCAL_REQUIRED_MODULES_x86_64 := crash_dump.policy mediaextractor.policy

		# extractor libraries
		LOCAL_REQUIRED_MODULES += \

100755 → 100644

+10 −16

Original line number	Diff line number	Diff line
		@@ -21,6 +21,7 @@ clone: 1
		getuid: 1
		setpriority: 1
		sigaltstack: 1
		fstatfs: 1
		newfstatat: 1
		restart_syscall: 1
		exit: 1
		@@ -30,28 +31,21 @@ faccessat: 1
		sched_setscheduler: 1
		getrlimit: 1
		nanosleep: 1
		getrandom: 1

		# for FileSource
		# for dynamically loading extractors
		getdents64: 1
		readlinkat: 1
		pread64: 1
		mremap: 1

		# for attaching to debuggerd on process crash
		tgkill: 1
		socket: arg0 == 1
		connect: 1
		fcntl: 1
		rt_sigprocmask: 1
		rt_sigaction: 1
		rt_tgsigqueueinfo: 1
		geteuid: 1
		getgid: 1
		getegid: 1
		getgroups: 1
		getdents64: 1
		pipe2: 1
		ppoll: 1
		# for FileSource
		readlinkat: 1

		# Required by AddressSanitizer
		gettid: 1
		sched_yield: 1
		getpid: 1
		gettid: 1

		@include /system/etc/seccomp_policy/crash_dump.x86_64.policy